Dibi8 + 提交工具

Semgrep：发现 500+ 漏洞的 15K 星 SAST 工具

Semgrep 是一款Open Source静态分析工具，拥有 15K+ GitHub star，可发现 Python、JavaScript、TypeScript、Go、Java 等领域的 500 多个漏洞模式。 快速、轻量级的 CI/CD 集成。 包括设置指南、基准测试和生产部署。

  • 更新于 2026-06-10

date: 2026-06-10 category: dev-utils github_repo: ‘https://github.com/semgrep/semgrep' license: MIT faqs:

  • q: “What is Semgrep?” a: “Semgrep is a developer utility tool that streamlines development workflows and improves productivity.”
  • q: “How does Semgrep integrate with existing tools?” a: “Semgrep is designed to work alongside popular development tools, providing seamless integration through plugins, CLI commands, or API endpoints.”
  • q: “Is Semgrep compatible with Linux, macOS, and Windows?” a: “Most developer utilities support multiple platforms. Check the documentation for specific OS compatibility and installation instructions.”——
Semgrep：15K 星 SAST 工具，可在 30 秒内找到代码库中的 500 多个漏洞 — 快速、轻量级、生产就绪 #

Strix AI：31K+明星开源渗透测试框架

Strix AI is an open-source penetration testing framework powered by AI agents. Automate vulnerability discovery, exploit development, and security reporting with state-of-the-art AI.

  • Python
详情

SkillSpector: NVIDIA's Open-Source Security Scanner for AI Agent

A security scanner for AI agent skills that detects vulnerabilities, malicious patterns, and security risks before installing agent skills. 10K stars from NVIDIA. Protect Claude Code, Codex CLI, and other agent frameworks.

    详情

    Trivy：停止将易受攻击的容器运送到生产环境

    Trivy（aquasecurity/trivy）是一款用于容器、基础设施即代码（IaC）和代码的Open Source安全扫描工具。可与 Kubernetes、Docker、GitHub Actions 和 CI 流水线无缝集成。扫描 60 万+ CVE 漏洞、密钥泄露和配置错误。涵盖安装、策略即代码和生产环境加固。

      详情

      Cognee：26K+ Star 开源人工智能内存平台

      Cognee is the open-source AI memory platform that gives agents persistent knowledge. Build intelligent agents that remember, reason, and evolve over time.

      • Python
      详情

      代理代理：125K+星开源人工智能代理框架

      Agency Agents is a complete open-source AI agency framework with 12+ specialized agents — from frontend designers to Reddit moderators. Learn how to deploy a full AI team for $0.

      • Bash
      详情

      代码库内存MCP：24K+星型AI代码智能服务器

      Codebase Memory MCP is a high-performance code intelligence server that indexes entire codebases into persistent memory for AI agents. Transform any LLM into a codebase-aware assistant.

      • C
      详情

      💬 留言讨论