This table outlines well-researched open-source CLI security tools that replicate GitHub’s repository security functionalities locally within the /home/workspace/source directory. These tools cover dependency management, vulnerability scanning, secret detection, static code analysis, container security, and automated penetration testing to ensure comprehensive security and efficient operations.
| Repo Name | Description | Star Count | Link |
|---|---|---|---|
| Renovate | Automatically updates dependencies like GitHub's Dependabot. | 17.3k | GitHub |
| Dependabot Core | Automates dependency management similar to GitHub's Dependabot. | 3.4k | GitHub |
| OWASP Dependency-Check | Scans dependencies for vulnerabilities, akin to GitHub security alerts. | 2.2k | GitHub |
| Snyk CLI | Detects and fixes vulnerabilities in dependencies. | 2.6k | GitHub |
| CodeQL | Performs semantic code analysis for vulnerabilities like GitHub's Code Scanning. | 6.3k | GitHub |
| git-secrets | Prevents committing sensitive data, similar to GitHub's Secret Scanning. | 4.2k | GitHub |
| detect-secrets | Scans code for secrets, akin to GitHub's Secret Scanning. | 2.9k | GitHub |
| TruffleHog | Detects secrets and high-entropy strings in code. | 13.6k | GitHub |
| SonarQube Scanner | Analyzes code quality and security like GitHub's Code Scanning. | 2.1k | GitHub |
| Bandit | Identifies security issues in Python code. | 6.2k | GitHub |
| Trivy | Scans filesystems for vulnerabilities, similar to GitHub's Container Scanning. | 18.5k | GitHub |
| clairctl | Analyzes containers for vulnerabilities. | 1.5k | GitHub |
| OWASP ZAP CLI | Performs automated penetration testing like GitHub's security analysis. | 12.8k | GitHub |
| Brakeman | Scans Ruby on Rails apps for vulnerabilities. | 5.1k | GitHub |