Application Security
Static analysis, dependency and container vulnerability scanning, secret detection, and dynamic security testing tools.
6 tools
CodeQL
GitHub's semantic code analysis engine for finding vulnerabilities
OSV-Scanner
Scan dependencies for known vulnerabilities using the OSV.dev database
Semgrep
Lightweight static analysis for finding bugs and enforcing code standards
Trivy
Find vulnerabilities, misconfigurations, and secrets in containers and code
TruffleHog
Find and verify leaked credentials in code, history, and cloud storage
ZAP
Open-source web application security scanner and intercepting proxy
Other categories
- API Development & Integrations
- AI Coding & Agents
- MCP Servers
- Agent Skills & Tooling
- Databases & Data Tools
- Hosting & Deployment
- DevOps & Infrastructure
- Observability & Monitoring
- Authentication & Identity
- Testing & QA
- Diagrams & Design
- Linters & Formatters
- Terminal & Productivity
- Converters & Online Utilities
- Local Dev & Scaffolding
- Interview & Learning
