Devsecops Python Packages

safety

Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.

crowdstrike-falconpy

The CrowdStrike Falcon SDK for Python

ggshield

Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.

pygitguardian

Python API client library for the GitGuardian API

xonsh

🐚 Python-powered shell. Full-featured, cross-platform and AI-friendly.

lib4sbom

Library to ingest and generate SBOMs

prowler

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

trufflehog

Find, verify, and analyze leaked credentials

njsscan

njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.

skylos

Open-source PR gate for Python, TS/JS, Java, and Go. Stop merging dead code, secrets, security flows, and AI-code regressions.

distro2sbom

Generates SBOM files from system packaging information

ca9

CVE reachability analysis for Python. Stop fixing vulnerabilities that don't affect you. Static + dynamic analysis to cut SCA noise from Snyk, Dependabot, Trivy, and others.

lib4vex

Library to ingest and generate VEX documents

csaf-tool

CSAF generator and validator

mockssh

Mock an SSH server and define all commands it supports (Python, Twisted)

agent-bom

Open security scanner for AI supply chain and infrastructure: agents, MCP, containers, cloud, GPU, and runtime with blast-radius analysis.

devsecops-engine-tools

Toolchain for the evaluation of different devsecops practices

ochrona

A command line tool for detecting vulnerabilities in Python dependencies and doing safe package installs

owasp-depscan

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

cve-bin-tool

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

sbom2doc

Transform SBOM contents into a formatted document including markdown and PDF formats

prowler-cloud

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

ds-analysis-lib

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

ds-xbom-lib

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.