Projects sharing features with Python Security Pyt

Git-secrets is a security utility designed to prevent the accidental exposure of sensitive credentials by integrating automated scanning directly into the version control commit lifecycle. It functions as a commit scanner that evaluates staged files and commit messages against defined security policies before changes are finalized in a repository. The tool utilizes regular expression pattern matching to identify potential secrets and supports the registration of custom patterns to address specific organizational security requirements. To manage operational friction, it includes mechanisms for

phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code

Tool to visualize UI canvas rebuilds and create performant Unity UI.

Checks filenames to be committed against a library of filename rules to prevent sensitive files in Git

This is "flawfinder" by David A. Wheeler.

A static analysis tool for security

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

A scene validator UI for unity

Editor utility for unity to help check resources in the current scene (including active textures, their sizes, materials, meshes and which objects are using them)

The Hawkeye scanner-cli is a project security, vulnerability and general risk highlighting tool. It is meant to be integrated into your pre-commit hooks and your pipelines.

A Unity3D plugin for checking unassigned references in MonoBehaviours at compile time, across scenes.

unity GUID查看项目资源使用情况工具 http://blog.ihaiu.com/unity-GUIDRef

Write tests against structured configuration data using the Open Policy Agent Rego query language

A server-side TypeScript and JavaScript library immune to Regular Expression Denial of Service (ReDoS) attacks by using Rust and linear RegEx under the hood. Regolith has a linear worst case time complexity, compared to the default RegExp found in TypeScript and JavaScript, which has an exponential worst case.

A Unity editor extension for finding missing object references

ESLint plugin to detect and stop Trojan Source attacks

Lint an npm or yarn lockfile to analyze and detect security issues

Analyze a git source code repository for health signals and project vitals

Tool for validating objects (eg. GameObjects, ScriptableObjects, etc) in the Unity Editor.

Small tool to inform you about potential risks in project dependencies list

A graph editor for viewing all UnityEvents at a glance

Unity Test Runner で実行できる汎用的なテストを 20 個以上まとめた Unity プロジェクト

mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.

JavaScript security CLI that allow you to deeply analyze the dependency tree of a given package or local Node.js project.

JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.

Generic SAST Library