Top Devsecops repositories

Repositories with the GitHub topic “devsecops”: 20 repositories with 371k stars between them, mostly written in Python, Go and TypeScript. The highest-rated is KeygraphHQ/shannon, #226 on the bestofgithub Elo ladder.

Biggest movers this week

openai/codex-security

Open on GitHubTypeScript

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

  • 1,862+37 Elo, change today
  • 13.6k stars
  • 1k forks
  • 51 watchers
docker
git clone https://github.com/openai/codex-security && cd codex-security && docker compose up -d
  • ai-security
  • application-security
  • cli
  • code-scanning

trufflesecurity/trufflehog

Open on GitHubGo

Find, verify, and analyze leaked credentials

  • 1,985+7 Elo, change today
  • 29.3k stars
  • 2.7k forks
  • 214 watchers
brew install trufflehog
  • credentials
  • devsecops
  • dynamic-analysis
  • precommit

gravitl/netmaker

Open on GitHubGo

Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.

  • 1,454+9 Elo, change today
  • 11.8k stars
  • 667 forks
git
git clone https://github.com/gravitl/netmaker.git
  • cloud
  • devsecops
  • ipv6-support
  • k8s

bytebase/bytebase

Open on GitHubTypeScript

Database governance built for humans and agents — controlling changes and access across every major database.

  • 1,602+3 Elo, change today
  • 14.7k stars
  • 1k forks
git
git clone https://github.com/bytebase/bytebase.git
  • cicd
  • data-governance
  • data-masking
  • data-security

bunkerity/bunkerweb

Open on GitHubPython

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

  • 1,585−11 Elo, change today
  • 11.2k stars
  • 674 forks
git
git clone https://github.com/bunkerity/bunkerweb.git
  • antibot
  • cybersecurity
  • devops
  • devsecops

aquasecurity/trivy

PickOpen on GitHubGo

Finds vulnerabilities, misconfigurations, secrets and SBOM issues in containers, Kubernetes and code.

  • 1,968+4 Elo, change today
  • 39.3k stars
  • 887 forks
  • 229 watchers
brew install trivy
  • security
  • containers
  • sbom

Top 20 on the Elo ladder

  1. #226
    KeygraphHQ/shannon

    Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and…

    2,112 Elo −2551.9kTypeScript
  2. #297
    mukul975/Anthropic-Cybersecurity-Skills

    817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS…

    2,067 Elo +3336.1kPython
  3. #473
    trufflesecurity/trufflehog

    Find, verify, and analyze leaked credentials

    1,985 Elo +7629.3kGo
  4. #518
    aquasecurity/trivy

    Finds vulnerabilities, misconfigurations, secrets and SBOM issues in containers, Kubernetes and code.

    1,968 Elo +3739.3kGo
  5. #527
    gitleaks/gitleaks

    Find secrets with Gitleaks 🔑

    1,964 Elo +2931kGo
  6. #779
    Infisical/infisical

    Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.

    1,899 Elo −430.5kTypeScript
  7. #966
    openai/codex-security

    OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm…

    1,862 Elo +24713.6kTypeScript
  8. #1,263
    MobSF/Mobile-Security-Framework-MobSF

    Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing…

    1,818 Elo −1922.2kPython
  9. #1,942
    prowler-cloud/prowler

    This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security…

    1,734 Elo +2715.2kPython
  10. #3,542
    bytebase/bytebase

    Database governance built for humans and agents — controlling changes and access across every major database.

    1,602 Elo +4814.7kTypeScript
  11. #3,795
    bunkerity/bunkerweb

    🛡️ Open-source and cloud-native Web Application Firewall (WAF)

    1,585 Elo +4111.2kPython
  12. #4,770
    We5ter/Scanners-Box

    The Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents——面向极客、企业与 AI 智能体的全域开源网络安全工具矩阵

    1,530 Elo +59.2k
  13. #4,880
    lintsinghua/DeepAudit

    DeepAudit:人人拥有的 AI 黑客战队,让漏洞挖掘触手可及。小白一键部署运行,自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ,一键生成报告。支持中转站。​让安全不再昂贵,让审计不再复杂。

    1,525 Elo −127.3kPython
  14. #6,055
    xonsh/xonsh

    🐚 Python-powered shell. Full-featured, cross-platform and AI-friendly.

    1,471 Elo +369.7kPython
  15. #6,465
    gravitl/netmaker

    Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.

    1,454 Elo +6411.8kGo
  16. #6,718
    firezone/firezone

    Blazing-fast remote access

    1,444 Elo +119.1kElixir
  17. #6,800
    infobyte/faraday

    Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous…

    1,441 Elo +336.8kPython
  18. #7,075
    sottlmarek/DevSecOps

    Ultimate DevSecOps library

    1,431 Elo +176.9k
  19. #8,536
    turbot/steampipe

    Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

    1,373 Elo +288kGo
  20. #9,127
    aquasecurity/tfsec

    Tfsec is now part of Trivy

    1,343 Elo +67kGo