Source

vchirrav-eng/owasp-secure-coding-md

37 skills · 98 combined installs

Skills from this source

#
Skill
Source
8W Activity
Installs
1
mobile-security-mobsf Run MobSF (Mobile Security Framework) for automated static and dynamic analysis of Android and iOS apps. Detects inse…
vchirrav-eng/owasp-secure-coding-md
17
2
sast-eslint-security Run ESLint with security plugins on JavaScript/TypeScript code. Detects eval usage, non-literal RegExp, prototype pol…
vchirrav-eng/owasp-secure-coding-md
5
3
api-security-schemathesis Run Schemathesis for property-based API security testing. Generates test cases from OpenAPI/GraphQL schemas to find c…
vchirrav-eng/owasp-secure-coding-md
4
4
dast-nuclei Run Nuclei template-based vulnerability scanner. Uses 8000+ community templates to detect CVEs, misconfigurations, ex…
vchirrav-eng/owasp-secure-coding-md
3
5
network-scan-nmap Run Nmap for network discovery and security auditing. Performs port scanning, service detection, OS fingerprinting, a…
vchirrav-eng/owasp-secure-coding-md
3
6
sbom-syft Run Syft to generate Software Bill of Materials (SBOM) from container images and filesystems. Outputs CycloneDX or SP…
vchirrav-eng/owasp-secure-coding-md
3
7
secret-scan-gitleaks Run Gitleaks to detect hardcoded secrets in git repositories. Finds API keys, tokens, passwords, and credentials in c…
vchirrav-eng/owasp-secure-coding-md
3
8
api-security-spectral Run Spectral to lint OpenAPI and AsyncAPI specs for security issues. Validates API design for authentication, authori…
vchirrav-eng/owasp-secure-coding-md
2
9
cloud-security-prowler Run Prowler for comprehensive cloud security posture assessment. Audits AWS, Azure, and GCP against CIS Benchmarks, P…
vchirrav-eng/owasp-secure-coding-md
2
10
cloud-security-scoutsuite Run ScoutSuite for multi-cloud security auditing. Collects configuration data from AWS, Azure, GCP, Oracle, and Aliba…
vchirrav-eng/owasp-secure-coding-md
2
11
container-scan-dockle Run Dockle to audit container images against CIS Docker Benchmark and best practices. Checks for running as root, sen…
vchirrav-eng/owasp-secure-coding-md
2
12
container-scan-hadolint Run Hadolint to lint Dockerfiles for best practices and security issues. Validates against Docker and ShellCheck rule…
vchirrav-eng/owasp-secure-coding-md
2
13
container-scan-trivy Run Trivy to scan container images for OS and library vulnerabilities, misconfigurations, and secrets. Comprehensive …
vchirrav-eng/owasp-secure-coding-md
2
14
dast-zap Run OWASP ZAP for Dynamic Application Security Testing. Performs baseline, full, or API scans against running web app…
vchirrav-eng/owasp-secure-coding-md
2
15
dependency-confusion-detect Run Confused and GuardDog to detect dependency confusion and typosquatting risks. Checks if internal package names ex…
vchirrav-eng/owasp-secure-coding-md
2
16
iac-scan-checkov Run Checkov to scan Infrastructure as Code for misconfigurations. Supports Terraform, CloudFormation, Kubernetes, Hel…
vchirrav-eng/owasp-secure-coding-md
2
17
iac-scan-kube-linter Run KubeLinter to lint Kubernetes YAML and Helm charts for security best practices. Checks pod security, resource lim…
vchirrav-eng/owasp-secure-coding-md
2
18
iac-scan-tfsec Run tfsec (now part of Trivy) to scan Terraform code for security misconfigurations. Deep HCL analysis with support f…
vchirrav-eng/owasp-secure-coding-md
2
19
license-scan-scancode Run ScanCode Toolkit for comprehensive license and copyright detection. Identifies license types, copyright holders, …
vchirrav-eng/owasp-secure-coding-md
2
20
malware-scan-yara Run YARA rules for pattern-based malware identification. Scans files and directories against community and custom rul…
vchirrav-eng/owasp-secure-coding-md
2
21
sast-bandit Run Bandit SAST scans on Python code. Detects common security issues like SQL injection, hardcoded passwords, exec us…
vchirrav-eng/owasp-secure-coding-md
2
22
sast-brakeman Run Brakeman SAST scans on Ruby on Rails applications. Detects SQL injection, XSS, mass assignment, CSRF, command inj…
vchirrav-eng/owasp-secure-coding-md
2
23
sast-cargo-audit Run cargo-audit and cargo-geiger on Rust code. Audits dependencies for known vulnerabilities and detects unsafe code …
vchirrav-eng/owasp-secure-coding-md
2
24
sast-detekt Run detekt static analysis on Kotlin code with security-focused rules. Detects hardcoded secrets, insecure crypto, an…
vchirrav-eng/owasp-secure-coding-md
2
25
sast-flawfinder Run Flawfinder SAST scans on C/C++ code. Detects buffer overflows, format string vulnerabilities, race conditions, an…
vchirrav-eng/owasp-secure-coding-md
2
26
sast-gosec Run gosec SAST scans on Go code. Detects SQL injection, hardcoded credentials, insecure TLS, command injection, and o…
vchirrav-eng/owasp-secure-coding-md
2
27
sast-psalm Run Psalm with taint analysis on PHP code. Detects SQL injection, XSS, command injection, path traversal, and other t…
vchirrav-eng/owasp-secure-coding-md
2
28
sast-semgrep Run Semgrep SAST scans on code. Supports 30+ languages with OWASP, security, and custom rulesets. Parses results and …
vchirrav-eng/owasp-secure-coding-md
2
29
sast-spotbugs Run SpotBugs with Find Security Bugs plugin on Java code. Detects injection flaws, XXE, insecure crypto, SSRF, deseri…
vchirrav-eng/owasp-secure-coding-md
2
30
sca-grype Run Anchore Grype for SCA vulnerability scanning on filesystems and container images. Matches dependencies against mu…
vchirrav-eng/owasp-secure-coding-md
2
31
sca-npm-audit Run npm audit for Node.js dependency vulnerability scanning. Built-in SCA for npm projects with automatic fix suggest…
vchirrav-eng/owasp-secure-coding-md
2
32
sca-osv-scanner Run Google's OSV-Scanner for Software Composition Analysis. Scans lockfiles and SBOMs across all major ecosystems (np…
vchirrav-eng/owasp-secure-coding-md
2
33
sca-pip-audit Run pip-audit for Python dependency vulnerability scanning. Checks installed packages and requirements files against …
vchirrav-eng/owasp-secure-coding-md
2
34
secret-scan-trufflehog Run TruffleHog to detect secrets in git repos, filesystems, and S3 buckets. Uses verification to confirm if detected …
vchirrav-eng/owasp-secure-coding-md
2
35
secure-coding-audit Audit code for security vulnerabilities using OWASP Secure Coding rules. Automatically detects the security domain (a…
vchirrav-eng/owasp-secure-coding-md
2
36
secure-coding-generate Generate secure code following OWASP Secure Coding rules. Automatically detects the security domain and produces code…
vchirrav-eng/owasp-secure-coding-md
2
37
tls-scan-testssl Run testssl.sh to analyze TLS/SSL configurations. Checks cipher suites, protocols, certificate validity, known vulner…
vchirrav-eng/owasp-secure-coding-md
2