Top 5 Rust Devsecops Projects

noseyparker

13 1,511 9.4 Rust

Nosey Parker is a command-line program that finds secrets and sensitive information in textual data and Git history.

Project mention: Magika: AI powered fast and efficient file type identification | news.ycombinator.com | 2024-02-15

Yes!
Sometimes a file has no extension. Other times the extension is a lie. Still other times, you may be dealing with an unnamed bytestring and wish to know what kind of content it is.
This last case happens quite a lot in Nosey Parker [1], a detector of secrets in textual data. There, it is possible to come across unnamed files in Git history, and it would be useful to the user to still indicate what type of file it seems to be.
I added file type detection based on libmagic to Nosey Parker a while back, but it's not compiled in by default because libmagic is slow and complicates the build process. Also, libmagic is implemented as a large C library whose primary job is parsing, which makes the security side of me jittery.
I will likely add enabled-by-default filetype detection to Nosey Parker using Magika's ONNX model.
[1] https://github.com/praetorian-inc/noseyparker

shisho

4 369 0.0 Rust

Lightweight static analyzer for several programming languages
InfluxDB

www.influxdata.com sponsored

Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
casr

2 237 8.6 Rust

Collect crash (or UndefinedBehaviorSanitizer error) reports, triage, and estimate severity.
cpplumber

1 75 10.0 Rust

Static analysis tool based on clang, which detects source-to-binary information leaks in C and C++ projects
lotus

4 64 7.1 Rust

:zap: Fast Web Security Scanner written in Rust based on Lua Scripts :waning_gibbous_moon: :crab: (by BugBlocker)
WorkOS

workos.com sponsored

The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).