Open Source Vulnerability Scanning Tools using Docker

A curated collection of the best open source scanners that find known weaknesses in code, dependencies, containers, and running hosts, then rank and track them until they are fixed. using Docker.

Advanced vulnerability detection and management platform

Monitor infrastructure for exploitable vulnerabilities with real-time detection, automated workflows, and zero false positives.

Open Source Alternative to:

Open-source code security engine for developers

Opengrep is a community-driven fork of SemgrepCE, providing accessible static code analysis and security scanning for developers.

CodeRabbit

The leading AI Code Review platform. Ship better quality code in 50% less time, with 90% fewer bugs.