Popular GitHub Repositories for Appsec

本项目通过大模型联动爬虫，检索Github上所有存有有价值漏洞信息与漏洞POC或规则信息的项目，并自动识别项目的目录结构、Readme信息后进行总结分析并分类，所汇总的项目可以帮助安全行业从业者收集漏洞信息、POC信息、规则等。

bumpgen is an AI agent that upgrades npm packages

OWASP Machine Learning Security Top 10 Project

Awesome products for securing AI systems includes open source and commercial options and an infographic licensed CC-BY-SA-4.0.

检查你的 GitHub Actions 工作流程运行情况，查看究竟下载了哪些 Actions

Powerful LLM Query Framework with YAML Prompt Templates. Made for Automation

A Threat Modeling AI agent, that perform iterative, deep research based on provided design doc.

Open-source MCP server for querying ZeroPath security issues, patches, and scans using Claude, Cursor, Windsurf, or any AI assistant.

An experimental ModelContextProtocol server connecting LLMs to DefectDojo for AI-powered security workflows. Enables natural language interaction with vulnerability data, simplifies security analysis, and automates reporting through a lightweight middleware integration.

一套可定制的 copilot-instructions.md 规则集和提示，用于引导 GitHub Copilot 在 Java、Node.js、C# 和 Python 中遵循安全的编码默认设置。它可以阻止危险的模式，并培养安全的编码习惯。