Statistics for topic devsecops

RepositoryStats tracks 584,797 Github repositories, of these 231 are tagged with the devsecops topic. The most common primary language for repositories using this topic is Go (51). Other languages include: Python (51),  JavaScript (15),  Shell (12),  Java (11)

Stargazers over time for topic devsecops

Most starred repositories for topic devsecops (view more)

aquasecurity
trivy aquasecurity
2.3k
23.7k
apache-2.0
168
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
go iac docker golang security devsecops containers kubernetes hacktoberfest vulnerability security-tools misconfiguration infrastructure-as-code vulnerability-scanners vulnerability-detection
Created 2019-04-11
3,219 commits to main branch, last one 22 hours ago
gitleaks
gitleaks gitleaks
1.5k
18.0k
mit
163
Protect and discover secrets using Gitleaks 🔑
go git golang secret gitleaks security devsecops hacktoberfest security-tools
Created 2018-01-27
1,112 commits to master branch, last one a day ago
MobSF
Mobile-Security-Framework-MobSF MobSF
3.2k
17.5k
gpl-3.0
579
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and ...
apk cwe mstg rest mastg masvs mobsf owasp devsecops api-testing ios-security web-security mobile-security static-analysis android-security dynamic-analysis malware-analysis runtime-security windows-mobile-security
Created 2015-01-31
1,980 commits to master branch, last one a day ago
trufflesecurity
trufflehog trufflesecurity
1.7k
17.3k
agpl-3.0
176
Find, verify, and analyze leaked credentials
secret secrets scanning security devsecops precommit trufflehog credentials verification hacktoberfest security-tools dynamic-analysis secret-management
Created 2016-12-31
3,642 commits to main branch, last one 15 hours ago
bytebase
bytebase bytebase
739
11.5k
other
88
The GitHub/GitLab for database DevSecOps. World's most advanced database DevSecOps solution for Developer, Security, DBA and Platform Engineering teams.
sql cicd tidb mysql devops flyway gitops oracle dbeaver navicat security devsecops liquibase snowflake sqlserver postgresql sql-client data-masking data-security schema-migrations
Created 2021-01-27
16,000 commits to main branch, last one 16 hours ago
prowler-cloud
prowler prowler-cloud
1.5k
10.9k
apache-2.0
130
Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. ...
aws gcp iam gdpr azure cloud python security devsecops forensics hardening compliance multi-cloud cis-benchmark security-audit security-tools well-architected security-hardening
Created 2016-08-24
4,550 commits to master branch, last one 17 hours ago

Trending repositories for topic devsecops (view more)

Last 3 days (new repositories)
no newly created repositories trending in the last 3 days
Last 3 days (absolute gain)
whgojp
whgojp/JavaSecLab

​ JavaSecLab是一款综合型Java漏洞平台，提供相关漏洞缺陷代码、修复代码、漏洞场景、审计SINK点、安全编码规范，覆盖多种漏洞场景，友好用户交互UI……

306 (+94)
apache-2.0
aquasecurity
aquasecurity/trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

23,748 (+46)
apache-2.0
trufflesecurity
trufflesecurity/trufflehog

Find, verify, and analyze leaked credentials

17,310 (+41)
agpl-3.0
madhuakula
madhuakula/kubernetes-goat

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

4,457 (+33)
mit
gitleaks
gitleaks/gitleaks

Protect and discover secrets using Gitleaks 🔑

17,991 (+29)
mit
Last 3 days (relative gain)
whgojp
whgojp/JavaSecLab

​ JavaSecLab是一款综合型Java漏洞平台，提供相关漏洞缺陷代码、修复代码、漏洞场景、审计SINK点、安全编码规范，覆盖多种漏洞场景，友好用户交互UI……

306 (+44%)
apache-2.0
narenaryan
narenaryan/whispr

A multi-vault secret injection tool for safely injecting secrets into app environment

97 (+13%)
mit
Aif4thah
Aif4thah/Dojo-101

Cybersecurity Knowledge Base

93 (+1%)
gpl-3.0
turbot
turbot/powerpipe

Powerpipe: Dashboards for DevOps. Visualize cloud configurations. Assess security posture against a massive library of benchmarks. Build custom dashboards with code.

293 (+1%)
agpl-3.0
RiccardoBiosas
RiccardoBiosas/awesome-MLSecOps

A curated list of MLSecOps tools, articles and other resources on security applied to Machine Learning and MLOps systems.

246 (+0.8%)
mit
Last week (new repositories)
no newly created repositories trending in the last week
Last week (absolute gain)
whgojp
whgojp/JavaSecLab

​ JavaSecLab是一款综合型Java漏洞平台，提供相关漏洞缺陷代码、修复代码、漏洞场景、审计SINK点、安全编码规范，覆盖多种漏洞场景，友好用户交互UI……

306 (+159)
apache-2.0
aquasecurity
aquasecurity/trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

23,748 (+110)
apache-2.0
trufflesecurity
trufflesecurity/trufflehog

Find, verify, and analyze leaked credentials

17,310 (+91)
agpl-3.0
DevOpsHiveHQ
DevOpsHiveHQ/dynamic-devops-roadmap

A FREE pragmatic plan to kickstart your DevOps Engineer career in the Cloud Native era following the Agile MVP style! ⭐ (2025)

1,400 (+84)
cc-by-sa-4.0
gitleaks
gitleaks/gitleaks

Protect and discover secrets using Gitleaks 🔑

17,991 (+69)
mit
Last week (relative gain)
whgojp
whgojp/JavaSecLab

​ JavaSecLab是一款综合型Java漏洞平台，提供相关漏洞缺陷代码、修复代码、漏洞场景、审计SINK点、安全编码规范，覆盖多种漏洞场景，友好用户交互UI……

306 (+108%)
apache-2.0
narenaryan
narenaryan/whispr

A multi-vault secret injection tool for safely injecting secrets into app environment

97 (+18%)
mit
DevOpsHiveHQ
DevOpsHiveHQ/dynamic-devops-roadmap

A FREE pragmatic plan to kickstart your DevOps Engineer career in the Cloud Native era following the Agile MVP style! ⭐ (2025)

1,400 (+6%)
cc-by-sa-4.0
turbot
turbot/powerpipe

Powerpipe: Dashboards for DevOps. Visualize cloud configurations. Assess security posture against a massive library of benchmarks. Build custom dashboards with code.

293 (+2%)
agpl-3.0
fatihtokus
fatihtokus/scan2html

A Trivy plugin that scans and outputs the results (vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more) to an interactive html file.

56 (+2%)
apache-2.0
Last month (new repositories)
WH1T3-E4GL3
WH1T3-E4GL3/gixposed

Gixposed is a powerful command-line tool designed to search the commit history of Git repositories for sensitive information, such as API keys and access tokens. Its purpose is to help developers and ...

28
Last month (absolute gain)
trufflesecurity
trufflesecurity/trufflehog

Find, verify, and analyze leaked credentials

17,310 (+1,349)
agpl-3.0
aquasecurity
aquasecurity/trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

23,748 (+446)
apache-2.0
gitleaks
gitleaks/gitleaks

Protect and discover secrets using Gitleaks 🔑

17,991 (+299)
mit
whgojp
whgojp/JavaSecLab

​ JavaSecLab是一款综合型Java漏洞平台，提供相关漏洞缺陷代码、修复代码、漏洞场景、审计SINK点、安全编码规范，覆盖多种漏洞场景，友好用户交互UI……

306 (+299)
apache-2.0
bunkerity
bunkerity/bunkerweb

🛡️ Open-source and next-generation Web Application Firewall (WAF)

6,557 (+235)
agpl-3.0
Last month (relative gain)
whgojp
whgojp/JavaSecLab

​ JavaSecLab是一款综合型Java漏洞平台，提供相关漏洞缺陷代码、修复代码、漏洞场景、审计SINK点、安全编码规范，覆盖多种漏洞场景，友好用户交互UI……

306 (+4,271%)
apache-2.0
narenaryan
narenaryan/whispr

A multi-vault secret injection tool for safely injecting secrets into app environment

97 (+1,113%)
mit
Mixeway
Mixeway/Flow

Repository containing source code of MixewayFlow service that is Swiss army knife for DevSecOps Teams

35 (+30%)
AyemunHossain
AyemunHossain/ISC2-CC-Dump-Questions-Study-Material

The content in this repo is based on the self-paced course called Certified in Cybersecurity from (ISC)2, which is a preparation for (ISC)2 Certified in Cybersecurity. And Also Dump Question which wil...

62 (+27%)
fatihtokus
fatihtokus/scan2html

A Trivy plugin that scans and outputs the results (vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more) to an interactive html file.

56 (+24%)
apache-2.0
Last 12-months (new repositories)
DevOpsHiveHQ
DevOpsHiveHQ/dynamic-devops-roadmap

A FREE pragmatic plan to kickstart your DevOps Engineer career in the Cloud Native era following the Agile MVP style! ⭐ (2025)

1,400
cc-by-sa-4.0
whgojp
whgojp/JavaSecLab

​ JavaSecLab是一款综合型Java漏洞平台，提供相关漏洞缺陷代码、修复代码、漏洞场景、审计SINK点、安全编码规范，覆盖多种漏洞场景，友好用户交互UI……

306
apache-2.0
boostsecurityio
boostsecurityio/poutine

boostsecurityio/poutine

232
apache-2.0
casa-de-vops
casa-de-vops/terraform-code-standards

Comprehensive set of Terraform coding standards designed for enterprise-level projects

123
apache-2.0
yevh
yevh/TaaC-AI

AI-driven Threat modeling-as-a-Code (TaaC-AI)

114
Last 12-months (absolute gain)
trufflesecurity
trufflesecurity/trufflehog

Find, verify, and analyze leaked credentials

17,310 (+4,573)
agpl-3.0
aquasecurity
aquasecurity/trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

23,748 (+4,379)
apache-2.0
bytebase
bytebase/bytebase

The GitHub/GitLab for database DevSecOps. World's most advanced database DevSecOps solution for Developer, Security, DBA and Platform Engineering teams.

11,473 (+3,994)
gitleaks
gitleaks/gitleaks

Protect and discover secrets using Gitleaks 🔑

17,991 (+3,817)
mit
bunkerity
bunkerity/bunkerweb

🛡️ Open-source and next-generation Web Application Firewall (WAF)

6,557 (+3,371)
agpl-3.0
Last 12-months (relative gain)
turbot
turbot/powerpipe

Powerpipe: Dashboards for DevOps. Visualize cloud configurations. Assess security posture against a massive library of benchmarks. Build custom dashboards with code.

293 (+4,783%)
agpl-3.0
boostsecurityio
boostsecurityio/poutine

boostsecurityio/poutine

232 (+1,833%)
apache-2.0
yevh
yevh/TaaC-AI

AI-driven Threat modeling-as-a-Code (TaaC-AI)

114 (+1,529%)
Night-Master
Night-Master/sdlc_golang

sdlc 是一个基于 Go 语言构建的安全漏洞示范平台，旨在促进 DevSecOps 和安全开发生命周期 (SDLC) 实践。它通过模拟常见漏洞来增强开发人员的安全意识，除了可以用于devsecops以外，还可以用于安全行业从事者学习漏洞知识或者渗透知识，代码审计，提供了一个实践和学习的环境。本项目采用了前后端分离的设计模式，其中后端利用了轻量级框架 Gin，而前端则使用了 Vue 3。

113 (+1,514%)
fatihtokus
fatihtokus/scan2html

A Trivy plugin that scans and outputs the results (vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more) to an interactive html file.

56 (+1,300%)
apache-2.0