Devsecops Python Packages

safety

Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.

crowdstrike-falconpy

The CrowdStrike Falcon SDK for Python

ggshield

Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.

pygitguardian

Python API client library for the GitGuardian API

xonsh

🐚 Python-powered shell. Full-featured, cross-platform and AI-friendly.

prowler

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

lib4sbom

Library to ingest and generate SBOMs

trufflehog

Find, verify, and analyze leaked credentials

njsscan

njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.

skylos

Open-source PR gate for Python, TS/JS, Java, and Go. Stop merging dead code, secrets, security flows, and AI-code regressions.

ca9

Open source Python CVE reachability analysis for evidence-backed SCA triage. Turn Snyk, Dependabot, Trivy, pip-audit, and OSV alerts into fix, suppress, or investigate decisions.

distro2sbom

Generates SBOM files from system packaging information

lib4vex

Library to ingest and generate VEX documents

csaf-tool

CSAF generator and validator

cve-bin-tool

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

agent-bom

Open security scanner for AI supply chain and infrastructure: agents, MCP, containers, cloud, GPU, and runtime with blast-radius analysis.

owasp-depscan

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

mockssh

Mock an SSH server and define all commands it supports (Python, Twisted)

ochrona

A command line tool for detecting vulnerabilities in Python dependencies and doing safe package installs

sbom2doc

Transform SBOM contents into a formatted document including markdown and PDF formats

ds-analysis-lib

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

ds-xbom-lib

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

ds-reporting-lib

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

devsecops-engine-tools

Toolchain for the evaluation of different devsecops practices