Instructions and materials to run the HIPSTER workshop
-
Updated
Aug 15, 2023
#
developer-security
Here are 37 public repositories matching this topic...
Claude Code skill that hardens package manager configs against supply chain attacks. Run /harden once, it detects what you have and secures it.
package-manager supply-chain-security developer-security dependency-confusion claude-code npm-security claude-code-skill pip-security
-
Updated
Apr 3, 2026
AI-powered vulnerability reporting platform that automates pentest report generation from raw findings into professional, client-ready deliverables.
python ai cybersecurity penetration-testing developer-tools bug-bounty workflow-automation security-tools security-engineering developer-productivity developer-security reporting-pipelines practical-tooling security-productivity
-
Updated
Apr 8, 2026 - HTML
Free AI agent authority, permissions and reachability resources for understanding what agents can access before they act.
mcp vscode-extension ai-agents zero-trust machine-identity ai-security developer-security ai-agent agent-tools credential-security model-context-protocol action-chains agent-security agent-governance machine-trust kya know-your-agent agent-permissions agent-authority ecz-id
-
Updated
Aug 14, 2026
Official ECZ-ID Agent Trust product and documentation hub. Local-first agent inventory, authority and change inspection for VS Code.
mcp vscode-extension ai-agents zero-trust ai-security local-first open-vsx developer-security agentic-ai agent-security machine-trust ecz-id
-
Updated
Aug 15, 2026 - Python
Practical examples for organisational machine identity, parent-child identity relationships and resolver-first evidence using ECZ-ID Business Passports.
resolver identity mcp provenance trust governance ai-agents authority zero-trust digital-identity machine-identity machine-economy software-identity developer-security business-identity api-identity machine-trust verifiable-evidence ecz-id organizational-identity
-
Updated
Aug 14, 2026
Official ECZ-ID MCP Trust product and documentation hub. Local-first MCP configuration and change inspection for VS Code.
mcp vscode-extension zero-trust local-first open-vsx developer-security model-context-protocol mcp-security machine-trust tool-security ecz-id
-
Updated
Aug 15, 2026 - Python
Endpoint security for the AI developer — monitor what AI coding agents actually do on your machine.
developer-tools cursor mitmproxy devsecops ai-agents runtime-monitoring ai-security security-monitoring endpoint-security supply-chain-security developer-security ai-monitoring claude-code ai-coding-agents
-
Updated
Jul 15, 2026 - Python
Free application security, secure coding, AI security, and real-world incident learning resources.
owasp application-security appsec security-training secure-coding devsecops ai-security developer-security secure-code-review prompt-injection
-
Updated
May 14, 2026
SAYANOX FORGE — A local-first developer engineering, security analysis, project health, and code intelligence platform.
react security opensource typescript static-analysis code-analysis cybersecurity developer-tools security-scanner secure-coding sarif security-tools devsecops vulnerability-scanner privacy-first vite local-first code-security developer-security sayanox
-
Updated
Sep 11, 2026 - TypeScript
Free MCP + AI agent trust preflight: 20 practical checks, safe examples, VS Code tooling, drift review and authority analysis.
mcp vscode secret-management vscode-extension appsec security-checklist devsecops ai-security runtime-security developer-security ai-agent prompt-injection rug-pull agentic-ai model-context-protocol mcp-server agent-security mcp-security ai-agent-security tool-poisoning
-
Updated
Aug 13, 2026
Local security tools for AI agents: review MCP configs, detect baseline drift, inspect identities, and draft evidence-backed security answers.
cli golang open-source mcp cybersecurity sarif security-tools devsecops ai-agents ai-security developer-security identity-security model-context-protocol non-human-identities
-
Updated
Oct 4, 2026 - Go
Scan untrusted code (any repo/package/zip) for planted malware before you open, install, or build it — with an auto-blocking hook for AI agents. Grounded in two real fake-recruiter malware cases.
npm security ai-agents malware-detection supply-chain-security developer-security prompt-injection agent-skills
-
Updated
Aug 4, 2026 - Shell
Security scanner for VSIX, MCP, AI IDEs, and developer workflow attack paths.
vsix vscode vscode-extension security-scanner sarif ai-security supply-chain-security developer-security ide-security
-
Updated
May 9, 2026 - Python
Fleet AI Security Posture Management (AI-SPM): client agents on each developer machine score their AI coding agents' guard surfaces (Claude Code, Cursor, Codex, Gemini CLI — permissions, hooks, sandboxes, mcp.json) and ship hash-anchored events to a central server + your SIEM. Fleet-wide posture; measures, doesn't block. Rust.
rust security mcp cybersecurity cursor siem soc codex ai-security endpoint-security detection-engineering developer-security ai-agent prompt-injection gemini-cli claude-code mcp-security ai-coding-agent tool-poisoning ai-spm
-
Updated
Sep 24, 2026 - Rust
Practical MCP readiness, security and stateless-migration resources for teams moving MCP servers toward enterprise deployment.
oauth security-audit mcp authorization oidc zero-trust machine-identity ai-security runtime-security enterprise-security developer-security model-context-protocol mcp-server mcp-security machine-trust tool-security stateless-mcp mcp-readiness ecz-id mcp-migration
-
Updated
Aug 14, 2026
Trust what your agents run. Local-first inventory and security for Agent Skills, extensions, and MCP servers.
-
Updated
Sep 21, 2026 - Go
Practical SBOM, software supply chain and DORA-aligned evidence examples for developer and procurement teams.
security provenance procurement software-supply-chain software-security dora evidence zero-trust digital-identity api-security machine-identity sbom dependency-security supply-chain-security cyber-resilience developer-security machine-trust dora-regulation compliance-evidence ecz-id
-
Updated
Aug 14, 2026
Developer examples for resolvable API identity, authority and evidence using the ECZ-ID API Passport model.
api resolver security identity api-management openapi provenance trust authority zero-trust api-governance digital-identity api-security machine-identity machine-economy developer-security api-identity machine-trust verifiable-evidence ecz-id
-
Updated
Sep 26, 2026 - Python
Zero-trust API firewall and security integrity layer for autonomous AI agents & Model Context Protocol (MCP) tool execution. Secure, TOCTOU-proof, fail-closed.
rust application-security python-sdk human-in-the-loop owasp-top-10 ai-agents go-sdk zero-trust security-gateway api-firewall developer-security axum agentic-ai model-context-protocol mcp-security fail-closed soc2-compliance cedar-policy cryptographic-integrity action-receipts
-
Updated
Oct 6, 2026 - Rust
Add this topic to your repo
To associate your repository with the developer-security topic, visit your repo's landing page and select "manage topics."