Top 15 Go vulnerability-scanner Projects

• trivy

  83 21,593 9.8 Go

  Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

  

Project mention: Cloud Security and Resilience: DevSecOps Tools and Practices | dev.to | 2024-05-01

4. Trivy: https://github.com/aquasecurity/trivy Trivy is a versatile tool that scans for vulnerabilities in your containers, and also checks for vulnerabilities in your application dependencies.

• vuls

  3 10,699 8.8 Go

  Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

  

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• tfsec

  29 6,583 5.2 Go

  Security scanner for your Terraform code

  

Project mention: Cloud Security and Resilience: DevSecOps Tools and Practices | dev.to | 2024-05-01

3. tfsec: https://github.com/aquasecurity/tfsec tfsec uses a suite of security checks to scan your Terraform templates, helping to identify potential security issues before infrastructure is deployed.

• scan4all

  1 5,287 7.7 Go

  Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...

  

• SecretScanner

  7 2,966 7.2 Go

  :unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

  

• trivy-operator

  2 1,063 9.6 Go

  Kubernetes-native security toolkit

  

• go-dork

  4 1,001 3.3 Go

  The fastest dork scanner written in Go.

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

• clair-scanner

  2 841 0.0 Go

  Docker containers vulnerability scan

• bomber

  4 458 6.9 Go

  Scans Software Bill of Materials (SBOMs) for security vulnerabilities

  

• LogMePwn

  1 379 0.0 Go

  A fully automated, reliable, super-fast, mass scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability.

• lazytrivy

  4 270 4.9 Go

  Vulnerability scanning just got lazier

• vesta

  1 172 6.3 Go

  A static analysis of vulnerabilities, Docker and Kubernetes cluster configuration detect toolkit based on the real penetration of cloud computing (by kvesta)

  

• udpx

  1 165 1.6 Go

  Fast and lightweight, UDPX is a single-packet UDP scanner written in Go that supports the discovery of over 45 services with the ability to add custom ones. It is easy to use and portable, and can be run on Linux, Mac OS, and Windows. Unlike internet-wide scanners like zgrab2 and zmap, UDPX is designed for portability and ease of use.

• vmclarity

  4 87 9.9 Go

  VMClarity is a tool for agentless detection and management of Virtual Machine Software Bill Of Materials (SBOM) and vulnerabilities

  

Project mention: An Overview of Kubernetes Security Projects at KubeCon Europe 2023 | dev.to | 2023-05-22

VMClarity works similarly, but within the context of VMs used by cloud services to host containers and clusters. Compared to containers, VMs may be as (or even more) vulnerable to threats and they typically need complex tools for analysis. Following a similar pattern to KubeClarity, VMClarity supports aggregating multiple tools into one UI and CLI.

• log4shelldetect

  3 44 0.0 Go

  Rapidly scan filesystems for Java programs potentially vulnerable to Log4Shell (CVE-2021-44228) or "that Log4j JNDI exploit" by inspecting the class paths inside files

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

Go vulnerability-scanners related posts

• Docker image vulnerabilities scanning trivy vs synk.io

  1 project | /r/docker | 30 Apr 2023

• Docker image vulnerabilities scanning trivy vs synk.io

  1 project | /r/cybersecurity | 30 Apr 2023

• How to scan and control the K8 objects are being created against security threats?

  4 projects | /r/kubernetes | 24 Mar 2023

• Is there a dashboard for the trivy-operator

  3 projects | /r/kubernetes | 7 Feb 2023

• Improving your CI/CD Pipeline: Helm Charts Security Scanning with Trivy and GitHub Actions

  2 projects | dev.to | 2 Dec 2022

• Find secrets and passwords in container images and file systems

  1 project | news.ycombinator.com | 27 Oct 2022

• v0.33.0 · Discussion #3077 · aquasecurity/trivy

  1 project | /r/devopsish | 25 Oct 2022
• A note from our sponsor - SaaSHub
  www.saashub.com | 20 May 2024

  SaaSHub helps you find the best software and product alternatives Learn more →

Index

Sponsored

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com

Do not miss the trending Go projects with our weekly report!