A GitHub Security Lab initiative, providing an in-repo learning experience, where learners secure intentionally vulnerable code.
-
Updated
Jan 1, 2026 - JavaScript
#
code-security
Here are 63 public repositories matching this topic...
Static Value-Flow Analysis Framework for Source Code
llvm static-analysis dependency-analysis code-analysis static-analyzer pointer-analysis points-to-analysis source-code-analysis code-security static-value-flow
-
Updated
Jan 6, 2026 - C++
Globstar is a fast, feature-rich, and open-source static analysis toolkit for writing and running code checkers. Based on tree-sitter.
-
Updated
Jul 3, 2025 - Go
Prevent merging of malicious code in pull requests
obfuscation static-analysis pull-request github-app security-tools cloud-security security-review malware-detection security-rules code-security malicious-code supply-chain-security semgrep semgrep-rules dynamic-execution code-integrity security-scan block-merging cicd-security opengrep
-
Updated
Jan 8, 2026 - Python
Django application that performs SAST and Malware Analysis for Android APKs
docker django malware django-rest-framework apk malware-analysis android-security mobile-security virustotal androguard apk-analysis sast code-security defect-dojo mobile-audit
-
Updated
Jan 8, 2026 - HTML
Focused malicious code detection ruleset, with a high protection-to-noise ratio
security obfuscation detection malware ruleset appsec devsecops cloud-security malware-detection code-security malicious-code supply-chain-security semgrep semgrep-rules dynamic-execution code-integrity security-scan malicious-detection cicd-security opengrep
-
Updated
Feb 24, 2025 - Python
Deterministic verification layer for LLMs | AI hallucination detection | Model output validation | Formal verification for AI | Python 🐍
python nlp machine-learning sympy smt-solver formal-verification ai-safety ai-security hallucination code-security ai-accuracy generative-ai langchain enterprise-ai neurosymbolic-ai llm-safety hallucination-detection z3-prover deterministic-ai llm-verification
-
Updated
Jan 12, 2026 - Python
AI code generation and improvement
-
Updated
Aug 29, 2025 - Python
The purpose of this document is to outline the security risks and vulnerabilities that may arise when implementing ChatGPT in web applications and to provide best practices for mitigating these risks.
security ai best-practices openai vulnerabilities mistral ai-agents claude gemini-api code-security security-risks vulnerabilities-fix chatgpt anthropic-claude security-best-practices
-
Updated
Jan 13, 2026
Codeaudit - Modern Python source code analyzer based on distrust.
python security static-analysis audit owasp appsec python-security vulnerability-scanners vulnerability-assessment code-scanning security-testing sast complexity-measure sourcecode-analysis code-audit codeanalyzer code-auditing code-security sldc code-security-audit
-
Updated
Jan 14, 2026 - Python
Monitor your code for exposed API keys, tokens, credentials, and high-risk security IaC misconfigurations
-
Updated
Sep 12, 2023 - TypeScript
Dismiss GitHub Code Scanning alerts from SARIF suppression data
-
Updated
Jan 12, 2026 - Java
Official documentation for Gitsecure
-
Updated
Oct 17, 2024 - MDX
Contexi let you interact with entire codebase or data with context using a local LLM on your system.
ai re-ranking code-search application-security security-tools ai-security rag code-security llm retrieval-augmented-generation ai-security-tool
-
Updated
Oct 23, 2024 - Python
Automatically monitors GitHub for code similarities and potential plagiarism using GitHub API. Includes Slack & Email alerts and an AI-based scanning skeleton for advanced code similarity detection.
github-api automation python-script plagiarism-detection copyright-protection github-actions code-security ai-detection alerting-system code-monitoring
-
Updated
Dec 3, 2025 - Python
How to secure your development pipeline with static application security test (SAST) / Dynamic application security test (DAST), software composition analysis (SCA) using Sonarqube.
maven static-analysis sonarqube dynamic-analysis application-security vulnerability-management sca secure-development devsecops software-composition-analysis sast dast dependency-scanning code-security open-source-security
-
Updated
Jan 12, 2026
AI-powered browser-based vulnerability scanner using UniXcoder embeddings and RAG with LLM to detect security flaws across 9 languages.
nextjs static-analysis cybersecurity cve cwe vulnerability-scanner pinecone rag fastapi groq code-security llm unixcoder
-
Updated
Oct 10, 2025 - TypeScript
A fast and powerful CLI tool for finding secrets and other data in files, web pages, and other text sources. Supports multi-threading and advanced pattern matching.
golang credentials tool cybersecurity infosec bugbounty pentest security-tools devsecops api-keys code-security secret-scanning secret-finder
-
Updated
Dec 5, 2025 - Go
The only tool your project needs to ensure security and quality. Open-source and free.
-
Updated
Nov 13, 2025 - Rust
Securing your Code with GitHub workshop
-
Updated
May 12, 2025 - TypeScript
Improve this page
Add a description, image, and links to the code-security topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the code-security topic, visit your repo's landing page and select "manage topics."