An awesome list of OSS developer-first security tools
-
Updated
May 15, 2025
#
developer-security
Here are 12 public repositories matching this topic...
An ongoing & curated collection of awesome software practices and remediation, libraries and frameworks,payloads and techniques, best guidelines and technical resources about Application Security
application application-security web-security security-vulnerability security-hardening appsec vulnerability-scanners security-scanner security-tools web-security-research security-testing endpoint-security mobilesecurity mdm-server developer-security security-advisory
-
Updated
Sep 23, 2023 - Python
Application scanning component of OWASP PurpleTeam
devops ci build-tool application-security web-security hacktoberfest devsecops cloud-security security-testing purpleteam application-scanner security-regression-testing devsecops-pipelin developer-security
-
Updated
Feb 12, 2023 - JavaScript
TLS scanning component of OWASP PurpleTeam
tls devops ci build-tool application-security web-security hacktoberfest devsecops cloud-security security-testing purpleteam devsecops-pipeline security-regression-testing tls-security developer-security
-
Updated
Feb 8, 2023 - JavaScript
Infrastructure as Code for SUTs
devops ci terraform iac build-tool application-security web-security hacktoberfest sut devsecops cloud-security security-testing purpleteam system-under-test devsecops-pipeline security-regression-testing developer-security
-
Updated
Jun 19, 2022 - HCL
Server scanning component of OWASP PurpleTeam
devops ci build-tool application-security web-security hacktoberfest devsecops cloud-security security-testing purpleteam devsecops-pipeline server-scanner security-regression-testing developer-security
-
Updated
Mar 5, 2023 - JavaScript
Stage Two containers of OWASP PurpleTeam
docker devops ci containers build-tool application-security web-security hacktoberfest devsecops cloud-security security-testing purpleteam devsecops-pipeline security-regression-testing developer-security
-
Updated
Feb 3, 2023 - Shell
AWS Lambda functions of OWASP PurpleTeam
devops lambda ci build-tool application-security web-security hacktoberfest devsecops cloud-security security-testing purpleteam devsecops-pipeline security-regression-testing purpleteam-lambda developer-security
-
Updated
Jul 13, 2022 - JavaScript
How to identify, analyze, and report targeted phishing campaigns on GitHub — with real-world case studies and a step-by-step takedown workflow.
security osint phishing cybersecurity opsec warnings threat-intelligence social-engineering scammers living-off-the-land abuse-reporting phishing-awareness github-security developer-security how-to-secure
-
Updated
Apr 1, 2026
Instructions and materials to run the HIPSTER workshop
-
Updated
Aug 15, 2023
Claude Code skill that hardens package manager configs against supply chain attacks. Run /harden once, it detects what you have and secures it.
package-manager supply-chain-security developer-security dependency-confusion claude-code npm-security claude-code-skill pip-security
-
Updated
Apr 3, 2026
Threat intel package for Lazarus Group's 3-wave GitHub phishing campaign targeting developers (Mar-Apr 2026). YARA, Sigma, Suricata, Nuclei rules + STIX 2.1 bundle + ATT&CK Navigator layer + full C2 infrastructure map. Defensive use only.
ioc apt phishing suricata nuclei stix sigma yara dprk threat-intelligence detection-rules mitre-attack supply-chain-security developer-security npm-security lazarus-group contagious-interview
-
Updated
Apr 9, 2026 - Python
Improve this page
Add a description, image, and links to the developer-security topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the developer-security topic, visit your repo's landing page and select "manage topics."