Tagged “supply-chain-security”

agentshield

Updated 2d ago

by aiconnai

MCP security scanner for Claude, Cursor, OpenAI Agents, LangGraph and CrewAI - offline Rust SAST with SARIF for GitHub Code Scanning

assay

Updated today

by Rul1an

Policy-as-code for MCP agents: deny risky tool calls before they run, prove what ran with verifiable evidence, and enforce egress in the kernel (eBPF/LSM, Linux). Deterministic, offline-first, bounded claims.

draugr

Updated today

by draugr-dev

Developer-first security scanning orchestration — describe your app in one file, run many scanners (SAST, SCA, secrets, IaC, containers, headers), get one SARIF verdict for CI & code scanning.

secretbank

Updated today

by phoodul

🔐 The secrets manager that understands your dependency graph. Maps Issuer → Credential → Project → Deployment → URL. Detects supply-chain risk in npm/Cargo deps. Free, open source, works offline.

mcpscan

Updated 6d ago

by glatinone

Supply-chain security scanner for MCP servers & Claude Code projects — catch tool-poisoning, command injection & risky permissions before you install. Zero deps.