asamassekou10

asamassekou10/ship-safe

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

766 stars 82 forks 766 watchers JavaScript MIT License
cli devscops npm owasp secrets security security-tools static-analysis
View on GitHub Website
8 Open Issues Need Help Last updated: Jul 22, 2026

Open Issues Need Help

View All on GitHub
Add Kimi K3 tool-call security fixtures about 3 hours ago
help wanted good first issue agent tests
asamassekou10/ship-safe
766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript
#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis
Improve dashboard empty states for first-time users about 3 hours ago
help wanted good first issue webapp
asamassekou10/ship-safe
766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript
#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis
Document project-local custom agent plugins about 3 hours ago
documentation help wanted good first issue agent
asamassekou10/ship-safe
766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript
#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis
Add GitLab CI security gate example about 3 hours ago
documentation help wanted good first issue
asamassekou10/ship-safe
766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript
#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis
Add agent config injection regression fixtures about 3 hours ago
help wanted good first issue agent tests
asamassekou10/ship-safe
766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript
#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis
Improve Supabase and Auth0 secret patterns about 3 hours ago
help wanted good first issue security rule tests
asamassekou10/ship-safe
766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript
#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis
Detect unpinned AI GitHub Actions with broad permissions about 3 hours ago
help wanted good first issue security rule
asamassekou10/ship-safe
766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript
#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis
Add MCP env secret passthrough detection about 3 hours ago
help wanted good first issue agent security rule
asamassekou10/ship-safe
766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript
#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis