Repositories list

• docker-vulnerable-dvwa

  Public
  Damn Vulnerable Web Application Docker container

  PHP

  •229•0•0•0•Updated Aug 4, 2025Aug 4, 2025

• ghas-demo

  Public
  0•0•0•0•Updated Jun 17, 2025Jun 17, 2025

• blur-generator

  Public
  TypeScript

  •0•0•0•0•Updated Feb 25, 2025Feb 25, 2025

• remap-sarif

  Public
  Remap a SARIF file with sourcemaps

  Python

  •

  MIT License

  •5•0•0•0•Updated Nov 6, 2024Nov 6, 2024

• merge-queue-demo

  Public
  GitHub Merge Queue demo

  5•0•0•2•Updated Nov 5, 2024Nov 5, 2024

• juice-shop-codeql-cli-test

  Public
  OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

  TypeScript

  •

  MIT License

  •14k•0•0•0•Updated Sep 26, 2024Sep 26, 2024

• WebGoat.NET

  Public
  OWASP WebGoat.NET

  C#

  •670•0•0•0•Updated Sep 26, 2024Sep 26, 2024

• psalm-github-security-scan

  Public
  Psalm Security Scanning for GitHub Actions

  Dockerfile

  •19•0•0•0•Updated Jun 20, 2024Jun 20, 2024

• actions-demo

  Public
  Playground for actions

  JavaScript

  •3•0•0•0•Updated May 29, 2024May 29, 2024

• juice-shop-2024

  Public
  OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

  TypeScript

  •

  MIT License

  •14k•0•0•0•Updated May 22, 2024May 22, 2024

• codeql-actions-test1

  Public
  HTML

  •

  Apache License 2.0

  •0•0•0•0•Updated May 16, 2024May 16, 2024

• test-ghas-fork-pr

  Public
  Python

  •1•0•0•0•Updated Apr 17, 2024Apr 17, 2024

• pygoat

  Public
  intentionally vuln web Application Security in django

  HTML

  •1k•0•0•0•Updated Mar 11, 2024Mar 11, 2024

• dvpwa

  Public
  Damn Vulnerable Python Web App

  Python

  •

  MIT License

  •657•0•0•0•Updated Feb 27, 2024Feb 27, 2024

• vulpy-reachability

  Public
  Vulnerable Python Application To Learn Secure Development

  Python

  •

  MIT License

  •463•0•0•0•Updated Feb 26, 2024Feb 26, 2024

• vulpy

  Public
  Vulnerable Python Application To Learn Secure Development

  Python

  •

  MIT License

  •463•0•0•0•Updated Feb 26, 2024Feb 26, 2024

• angular-codespace

  Public template
  A GitHub Codespace for Angular projects

  HTML

  •19•0•0•0•Updated Feb 2, 2024Feb 2, 2024

• terragoat

  Public
  TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

  HCL

  •

  Apache License 2.0

  •5.5k•0•0•0•Updated Feb 1, 2024Feb 1, 2024

• container-scanning

  Public
  Dockerfile

  •0•0•0•0•Updated Dec 12, 2023Dec 12, 2023

• collaborators-test

  Public
  0•0•0•0•Updated Oct 18, 2023Oct 18, 2023

• importer-labs

  Public
  Ruby

  •

  MIT License

  •0•0•0•0•Updated Oct 10, 2023Oct 10, 2023

• DevSecOps

  Public
  A repo for testing and demonstration purposes.

  Bicep

  •30•0•0•0•Updated Sep 28, 2023Sep 28, 2023

• potion_shop

  Public
  A vulnerable Elixir and Phoenix application for learning web security

  Elixir

  •37•0•0•0•Updated Sep 22, 2023Sep 22, 2023

• dotnet-privatepackage-test

  Public
  C#

  •0•0•0•0•Updated Sep 7, 2023Sep 7, 2023

• js-apps

  Public
  JavaScript simple applications, exercises & examples 🍃

  HTML

  •6•0•0•0•Updated May 30, 2023May 30, 2023

• aws-cdk-examples

  Public
  Example projects using the AWS CDK

  Python

  •

  Apache License 2.0

  •2.3k•0•0•0•Updated Apr 4, 2023Apr 4, 2023

• mvc-todo-app

  Public
  JavaScript

  •0•0•0•1•Updated Mar 31, 2023Mar 31, 2023

• OwaspTop10Examples

  Public
  A demonstration of OWASP 2017 Top 10 and .NET Core

  C#

  •

  MIT License

  •34•0•0•0•Updated Mar 17, 2023Mar 17, 2023

• wrongsecrets

  Public
  Vulnerable app with examples showing how to not use secrets

  Java

  •

  MIT License

  •464•0•0•0•Updated Feb 1, 2023Feb 1, 2023

• actions-examples

  Public
  A collection of different examples of GitHub Actions workflows.

  0•0•0•0•Updated Jan 29, 2023Jan 29, 2023