malicious-code-ruleset

Focused malicious code detection ruleset, with a high protection-to-noise ratio (by apiiro)
Review Appsec cicd-security cloud-security code-integrity code-security Detection Devsecops dynamic-execution malicious-code malicious-detection Malware malware-detection Obfuscation opengrep Ruleset Security security-scan semgrep semgrep-rules supply-chain-security
Source Code
apiiro.com
malicious-code-ruleset Reviews
Suggest alternative
Edit details
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com
sponsored

Malicious-code-ruleset Alternatives

Similar projects and alternatives to malicious-code-ruleset

apiiro
malicious-code-ruleset

  1. vite

    957 malicious-code-ruleset VS vite

    Next generation frontend tooling. It's fast!

  2. AppSignal

    Monitoring that respects your time & budget. APM, error tracking, and dashboards for modern web apps. Ten-minute setup, transparent flat pricing, and support from engineers who actually use the product.

    AppSignal logo

  3. opensnitch

    233 malicious-code-ruleset VS opensnitch

    OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.

  4. firejail

    150 malicious-code-ruleset VS firejail

    Linux namespaces and seccomp-bpf sandbox

  5. checkout

    91 malicious-code-ruleset VS checkout

    Action for checking out a repo

  6. scorecard

    38 malicious-code-ruleset VS scorecard

    OpenSSF Scorecard - Security health metrics for Open Source

  7. vet

    20 malicious-code-ruleset VS vet

    Protect against malicious open source packages 🤖

  8. changed-files

    24 malicious-code-ruleset VS changed-files

    :octocat: Github action to retrieve all (added, copied, modified, deleted, renamed, type changed, unmerged, unknown) files and directories.

  9. SaaSHub

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    SaaSHub logo

  10. harden-runner

    19 malicious-code-ruleset VS harden-runner

    Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.

  11. renovate

    14 malicious-code-ruleset VS renovate

  12. maven-lockfile

    4 malicious-code-ruleset VS maven-lockfile

    Lockfiles for Maven. Pin your dependencies. Build with integrity.

  13. PRevent

    5 malicious-code-ruleset VS PRevent

    Prevent merging of malicious code in pull requests

  14. npq

    8 malicious-code-ruleset VS npq

    safely install npm packages by auditing them pre-install stage

  15. agentkit

    3 malicious-code-ruleset VS agentkit

    Every AI Agent deserves a wallet. (by coinbase)

  16. gh-action-pypi-publish

    7 malicious-code-ruleset VS gh-action-pypi-publish

    The blessed :octocat: GitHub Action, for publishing your :package: distribution files to PyPI, the tokenless way: https://github.com/marketplace/actions/pypi-publish

  17. autogrep

    1 malicious-code-ruleset VS autogrep

    Autogrep automates Semgrep rule generation and filtering by using LLMs to analyze vulnerability patches, enabling automatic creation of high-quality security rules without manual curation.

  18. paths-filter

    1 malicious-code-ruleset VS paths-filter

    Conditionally run actions based on files modified by PR, feature branch or pushed commits. Secure drop-in replacement for dorny/paths-filter. (by step-security)

  19. changed-files

    3 malicious-code-ruleset VS changed-files

    Github action to retrieve all (added, copied, modified, deleted, renamed, type changed, unmerged, unknown) files and directories. Secure drop-in replacement for tj-actions/changed-files. (by step-security)

  20. changed-files

    3 malicious-code-ruleset VS changed-files

    A patched clone tj-actions with the malicious commit reverted (by trmlabs)

  21. cicd-goat

    17 malicious-code-ruleset VS cicd-goat

    A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

  22. pre-commit-hooks

    2 malicious-code-ruleset VS pre-commit-hooks

  23. SaaSHub

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    SaaSHub logo
NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a better malicious-code-ruleset alternative or higher similarity.
Suggest an alternative to malicious-code-ruleset

malicious-code-ruleset discussion

Log in or Post with

malicious-code-ruleset reviews and mentions

Posts with mentions or reviews of malicious-code-ruleset. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2025-03-14.
  • Popular GitHub Action tj-actions/changed-files is compromised
    35 projects | news.ycombinator.com | 14 Mar 2025
    We've recently released open-source tools that would have easily prevented this, before anything runs or added to any pipeline:

    1. The maintainers could have used PRevent to immediately alert and block any PR containing malicious code, or easily configured it for detection in case of a direct push: https://github.com/apiiro/PRevent

    2. Users could have used our malicious code detection ruleset to immediately detect and block it when scanning updates in all relevant CI/CD stages: https://github.com/apiiro/malicious-code-ruleset

    3. For a better understanding of the detection, the malicious code falls precisely into the patterns presented in our research: https://apiiro.com/blog/guard-your-codebase-practical-steps-...

  • Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos
    15 projects | news.ycombinator.com | 14 Mar 2025
    https://github.com/apiiro/malicious-code-ruleset

    3. For a better understanding of the detection, the malicious code falls precisely into the patterns presented in our research:

  • I built a PR listener and a ruleset for detecting malicious code at any stage of the CI/CD
    2 projects | dev.to | 26 Feb 2025
    The ruleset: https://github.com/apiiro/malicious-code-ruleset
  • Show HN: I built a PR listener and ruleset to detect malicious code in CI/CD
    2 projects | news.ycombinator.com | 25 Feb 2025
    I built a GitHub app that detects it in pull requests, notifies or blocks them. Alongside it, I published a Semgrep ruleset for any stage of the CI/CD.

    I started this after getting frustrated by all the FUD around malicious code - lots of noise, little effort to solve it. Having said that, it's still a major attack vector - a stored RCE, with the codebase itself as the sink.

    Feedback is appreciated.

    The app, PRevent - https://github.com/apiiro/PRevent

    The ruleset: https://github.com/apiiro/malicious-code-ruleset

    The research: https://apiiro.com/blog/guard-your-codebase-practical-steps-...

  • A note from our sponsor - SaaSHub
    www.saashub.com | 7 Oct 2026
    SaaSHub helps you find the best software and product alternatives Learn more →

Stats

Basic malicious-code-ruleset repo stats
4
149
7.8
over 1 year ago

apiiro/malicious-code-ruleset is an open source project licensed under MIT License which is an OSI approved license.

The primary programming language of malicious-code-ruleset is Python.

Popular Comparisons

  1. malicious-code-ruleset VS maven-lockfile
  2. malicious-code-ruleset VS PRevent
  3. malicious-code-ruleset VS vet
  4. malicious-code-ruleset VS autogrep
  5. malicious-code-ruleset VS opensnitch
  6. malicious-code-ruleset VS agentkit
  7. malicious-code-ruleset VS paths-filter
  8. malicious-code-ruleset VS cicd-goat
  9. malicious-code-ruleset VS introspector
  10. malicious-code-ruleset VS renovate

Sponsored
Monitoring that respects your time & budget
APM, error tracking, and dashboards for modern web apps. Ten-minute setup, transparent flat pricing, and support from engineers who actually use the product.
www.appsignal.com
Loading...