Repositories list

• buttercup

  Public
  Python

  •

  GNU Affero General Public License v3.0

  •83•817•21•7•Updated Aug 14, 2025Aug 14, 2025

• publications

  Public
  Publications from Trail of Bits

  conference-presentationsacademic-paperssecurity-reviews

  Python

  •

  Creative Commons Attribution Share Alike 4.0 International

  •199•1.6k•4•3•Updated Aug 14, 2025Aug 14, 2025

• test-fuzz

  Public
  To make fuzzing Rust easy

  testingrustfuzzing

  Rust

  •

  GNU Affero General Public License v3.0

  •24•185•11•5•Updated Aug 14, 2025Aug 14, 2025

• sigstore-rekor-types

  Public
  Python models for Rekor's API types

  Python

  •

  Apache License 2.0

  •3•6•1•18•Updated Aug 14, 2025Aug 14, 2025

• instafix-llvm

  Public
  LLVM fork for INSTAFIX

  LLVM

  •

  Other

  •15k•2•0•5•Updated Aug 14, 2025Aug 14, 2025

• vendetect

  Public
  A tool to automatically detect copy+pasted and vendored code between repositories

  program-analysisplagiarism-detectionsbom+ 1sbom-tool

  Python

  •

  GNU Affero General Public License v3.0

  •5•55•1•1•Updated Aug 14, 2025Aug 14, 2025

• pylock-attestations

  Public
  CLI tool to add attestation identities to `pylock.toml` files

  Python

  •

  Apache License 2.0

  •1•5•3•1•Updated Aug 13, 2025Aug 13, 2025

• mcp-context-protector

  Public
  MCP security wrapper

  Python

  •

  Apache License 2.0

  •8•151•5•2•Updated Aug 13, 2025Aug 13, 2025

• datasig

  Public
  Dataset fingerprinting for AIBOM

  Python

  •

  GNU Affero General Public License v3.0

  •0•15•0•3•Updated Aug 13, 2025Aug 13, 2025

• cargo-unmaintained

  Public
  Find unmaintained packages in Rust projects

  rustunmaintainedpackage-management

  Rust

  •

  GNU Affero General Public License v3.0

  •13•77•9•0•Updated Aug 13, 2025Aug 13, 2025

• algo

  Public
  Set up a personal VPN in the cloud

  securityansibleencryption+ 8ipsecikev2wireguardvpnvpn-servervpn-clientstrongswan+ 1

  Python

  •

  GNU Affero General Public License v3.0

  •2.4k•30k•87•5•Updated Aug 13, 2025Aug 13, 2025

• signal-auditor

  Public
  Key Transparency Auditor for Signal

  Rust

  •

  GNU Affero General Public License v3.0

  •0•2•0•1•Updated Aug 13, 2025Aug 13, 2025

• fickling

  Public
  A Python pickling decompiler and static analyzer

  machine-learningpythonsecurity

  Python

  •

  GNU Lesser General Public License v3.0

  •59•537•14•7•Updated Aug 13, 2025Aug 13, 2025

• rfc3161-client

  Public
  An Opinionated Python RFC3161 Client

  rfc3161timestamp-protocol

  Rust

  •

  Apache License 2.0

  •4•2•2•1•Updated Aug 13, 2025Aug 13, 2025

• cookiecutter-python

  Public
  A cookiecutter template for a best-practices Python project

  Python

  •

  Apache License 2.0

  •6•18•0•6•Updated Aug 13, 2025Aug 13, 2025

• gh-action-adapt-sigstore-pypi

  Public
  Python

  •

  Apache License 2.0

  •0•1•0•2•Updated Aug 13, 2025Aug 13, 2025

• cast_checks

  Public
  A procedural macro to check for invalid casts

  rustcasts

  Rust

  •

  Apache License 2.0

  •3•9•0•0•Updated Aug 13, 2025Aug 13, 2025

• rfc8785.py

  Public
  A pure-Python implementation of RFC8785 (JSON Canonicalization Scheme)

  pythonserializationjson+ 2cryptographycanonicalization

  Python

  •

  Apache License 2.0

  •2•5•0•1•Updated Aug 12, 2025Aug 12, 2025

• deptective

  Public
  Deptective automatically determines the native dependencies required to run any arbitrary program or command.

  dependency-analysissbomsbom-tool

  Python

  •

  GNU Lesser General Public License v3.0

  •0•114•1•2•Updated Aug 12, 2025Aug 12, 2025

• pip-plugin-pep740

  Public
  An implementation of a pip plugin that verifies PEP-740 attestations before installing a package, and aborts the installation if verification fails.

  Python

  •

  Apache License 2.0

  •0•2•1•1•Updated Aug 12, 2025Aug 12, 2025

• siderophile

  Public
  Find the ideal fuzz targets in a Rust codebase

  fuzzingprogram-analysissecurity-testing+ 1rust

  Rust

  •

  MIT License

  •12•218•12•12•Updated Aug 12, 2025Aug 12, 2025

• polyfile

  Public
  A pure Python cleanroom implementation of libmagic, with instrumented parsing from Kaitai struct and an interactive hex viewer

  file-format-detectionlibmagicfile-formats+ 2polyglotspython

  Python

  •

  Apache License 2.0

  •24•362•19•2•Updated Aug 12, 2025Aug 12, 2025

• pypi-attestations

  Public
  A library to convert between Sigstore Bundles and PEP 740 Attestation objects

  Python

  •

  Apache License 2.0

  •6•9•7•2•Updated Aug 12, 2025Aug 12, 2025

• necessist

  Public
  A mutation-based tool for finding bugs in tests

  testingmutation

  Rust

  •

  GNU Affero General Public License v3.0

  •17•123•17•0•Updated Aug 12, 2025Aug 12, 2025

• build-wrap

  Public
  Help protect against malicious build scripts

  rustsandboxingbuild-scripts

  Rust

  •

  GNU Affero General Public License v3.0

  •3•14•1•0•Updated Aug 12, 2025Aug 12, 2025

• cargo-line-test

  Public
  Run tests by the lines they exercise

  testingrust

  Rust

  •3•7•2•1•Updated Aug 12, 2025Aug 12, 2025

• pe-parse

  Public
  Principled, lightweight C/C++ PE parser

  pe-formatportable-executablehacktoberfest

  C++

  •

  MIT License

  •164•859•16•4•Updated Aug 12, 2025Aug 12, 2025

• eatmynetwork

  Public
  A small script for running programs with (minimal) network sandboxing

  macossandboxresilience-testing+ 1linux

  Shell

  •

  Apache License 2.0

  •2•51•0•1•Updated Aug 12, 2025Aug 12, 2025

• zkdocs

  Public
  Interactive documentation on zero-knowledge proof systems and related primitives.

  cryptographyzero-knowledge

  HTML

  •

  Creative Commons Attribution 4.0 International

  •52•160•6•11•Updated Aug 12, 2025Aug 12, 2025

• weggli-native

  Public
  C API bindlings for Google's weggli

  Rust

  •

  Apache License 2.0

  •3•11•3•1•Updated Aug 12, 2025Aug 12, 2025