Data / Repositories / Devsecops
Devsecops repositories on GitHub: 16 ranked by stars
16 public repositories tagged Devsecops are on GitHub, with 42,613 stars between them; 14 had a push in the last 30 days. Most are written in Python (7), Go (2), Rust (2). The most starred: prowler-cloud/prowler (15,030), bytebase/bytebase (14,564), hahwul/dalfox (5,325).
SpecStream is the live web data engine for teams and agents. It reads open-source repositories on GitHub and keeps what it reads, and this page groups that reading by topic. Ask for the repositories you track by topic, language, license or activity, and new ones and changes arrive in your sheet, CRM, Slack or agent.
Every repository, most starred first
| Repository | What it is | Language | Stars | Forks | License | Last push | Read |
|---|---|---|---|---|---|---|---|
| prowler-cloud/prowler | Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment. | Python | 15,030 | 2,433 | Apache-2.0 | Oct 14 | Oct 14 |
| bytebase/bytebase | Database governance built for humans and agents — controlling changes and access across every major database. | Go | 14,564 | 992 | Oct 14 | Oct 14 | |
| hahwul/dalfox | Dalfox is a powerful open-source XSS scanner and utility focused on automation. | Rust | 5,325 | 568 | MIT | Oct 14 | Oct 14 |
| ossf/cve-bin-tool | The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2… | Python | 1,777 | 670 | GPL-3.0 | Oct 7 | Oct 11 |
| jakob-pennington/awesome-devsecops | Curating the best DevSecOps resources and tooling. | 1,745 | 257 | CC0-1.0 | Aug 2, 2024 | Oct 11 | |
| mukul975/cve-mcp-server | Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more. | Python | 1,624 | 269 | Apache-2.0 | Oct 1 | Oct 14 |
| mongodb/kingfisher | Detect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python. | Rust | 1,260 | 123 | Apache-2.0 | Oct 7 | Oct 11 |
| hashgraph-online/hol-guard | Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime. | Python | 892 | 158 | Apache-2.0 | Oct 14 | Oct 14 |
| gensecaihq/Wazuh-MCP-Server | Production-grade MCP server for Wazuh SIEM — 55 security tools for alert triage, threat hunting, vulnerability management, compliance (PCI DSS, GDPR, HIPAA, NIST CSF, ISO 27001)… | Python | 251 | 65 | MIT | Oct 9 | Oct 14 |
| WagnerAgent/awesome-mcp-servers-devops | A curated, DevOps-focused list of Model Context Protocol (MCP) servers—covering source control, IaC, Kubernetes, CI/CD, cloud, observability, security, and collaboration—with a… | 97 | 75 | CC0-1.0 | Oct 6 | Oct 14 | |
| nsasoft/nsauditor-ai | NSAuditor AI — Open-source, AI-powered network security scanner. 27 plugins, CVE matching, MITRE ATT&CK mapping, verified vulnerabilities, continuous monitoring, MCP integration.… | JavaScript | 20 | 6 | MIT | Oct 12 | Oct 14 |
| safe-agentic-world/nomos | Deny-wins policy hook for Claude Code and Codex. Checks every shell, file, and fetch call against rules you keep in Git, holds under --dangerously-skip-permissions, refuses… | Go | 19 | 1 | Apache-2.0 | Sep 27 | Oct 14 |
| eltociear/skill-audit-mcp | Static security scanner for MCP servers, agent skills & plugins: 17 attack patterns / 60 regex signatures, calibrated to a 1% false-positive rate over 196 public MCP servers. In… | Python | 5 | 1 | MIT | Sep 30 | Oct 14 |
| vasikmansuri/agentconfig-doctor | MCP security scanner & config linter for AI coding agents. Finds leaked secrets, risky commands, broad permissions and invalid MCP servers in Claude Code, Cursor and VS Code… | TypeScript | 3 | 0 | MIT | Oct 14 | Oct 14 |
| muhammadwaqar12/mcp-server-audit | Security audit checklist for third-party MCP servers before you install them | 1 | 0 | MIT | Sep 6 | Oct 14 | |
| tomelias10/mcp-drift-check | Static MCP package-reference mutability checker: Python CLI and GitHub Action. No discovered server execution. Broader config/baseline tools: Orynval Labs. | Python | 0 | 5 | MIT | Oct 11 | Oct 14 |
By language
- Python 7
Related topics
- Security 12
- MCP 10
- Model Context Protocol 6
- Python 5
- Security tools 5
- AI security 5
- Security scanner 4
- AI agents 4
- Claude Code 4
- DEVOPS 3
- Awesome list 3
- Static analysis 3
Read from GitHub by SpecStream between October 11, 2026 and October 14, 2026; each row shows the day its repository was read. Stars and pushes change every day, and the GitHub page is the current one. Forks and archived repositories are left out.