TAG

#devsecops

TEMPLATE · 4 views

Toolproof (by ayush00dhyani-star)

Trust grades, capability lockfiles, and signed evidence for the AI tool supply chain. Scan any MCP server or API before your agent connects. Paid by nobody we scan.

TEMPLATE · 3 views

MCP Scorecard (by Kerrimoral221)

Score MCP servers for conformance, security, ergonomics, and metadata in CI before they reach real workflows

TEMPLATE · 2 views

K8s Guardian (by andronaft)

Kubernetes guardrails that know your cluster: check and safely fix manifests, Helm charts and Kustomize, check cluster fit, and enforce the same rules as ValidatingAdmissionPolicy or Kyverno. CLI, kubectl plugin, GitHub Action, MCP server.

TEMPLATE · 5 views

Security Audit Cli (by fabriziosalmi)

Deterministic 6-phase security audit CLI, MCP server, and VS Code extension (1:1:1 parity, *os.Root confinement, SARIF 2.1.0, GHSA advisories)

TEMPLATE · 1 views

Rugsnare (by Paraphern)

218 silent contract changes found in the npm MCP top. Pin MCP tool contracts, fail CI on drift. Zero deps, no telemetry, on-chain verified.

TEMPLATE · 1 views

Vexar MCP (by RANJITHROSAN17)

Security, schema and token-cost checks for MCP servers and AI agent tools. Static analysis that never runs your code, with policy gates for CI, SARIF, and a deliberate 'n/a' when a scan could not read your files.

TEMPLATE · 1 views

Proof Of Commitment (by piiiico)

Supply chain security risk scorer for npm, PyPI, Cargo, and Go — behavioral signals that can't be faked