All

270 repositories

pasta
Public
Peter's Amazing Syntax Tree Analyzer
compiler llvm static-analysis
compiler llvm static-analysis ast clang
C++
•
Apache License 2.0
•7•137•19•0•Updated May 3, 2026May 3, 2026
dylint
Public
Run Rust lints from dynamic libraries
rust linting
rust linting
Rust
•
Apache License 2.0
•50•574•46•9•Updated May 3, 2026May 3, 2026
build-wrap
Public
Help protect against malicious build scripts
rust sandboxing build-scripts
rust sandboxing build-scripts
Rust
•
GNU Affero General Public License v3.0
•4•27•2•0•Updated May 2, 2026May 2, 2026
cast_checks
Public
A procedural macro to check for invalid casts
rust casts
rust casts
Rust
•
Apache License 2.0
•4•10•0•0•Updated May 2, 2026May 2, 2026
cargo-unmaintained
Public
Find unmaintained packages in Rust projects
rust unmaintained package-management
rust unmaintained package-management
Rust
•
GNU Affero General Public License v3.0
•13•88•11•2•Updated May 2, 2026May 2, 2026
monorepo-code-scanning-action
Public
Focus SAST scans (with CodeQL) on just the changed parts of your monorepo, split up as you define
JavaScript
•
MIT License
•4•0•0•3•Updated May 2, 2026May 2, 2026
scribe
Public
Local transcription and speaker diarization with pyannote and parakeet
Python
•
MIT License
•3•27•0•3•Updated May 2, 2026May 2, 2026
gh-action-adapt-sigstore-pypi
Public
Python
•
Apache License 2.0
•0•1•0•1•Updated May 1, 2026May 1, 2026
multiplier
Public
Code auditing productivity multiplier.
analysis audit clang
analysis audit clang mlir
C++
•
Apache License 2.0
•34•473•115•2•Updated May 1, 2026May 1, 2026
vscode-sarif-explorer
Public
SARIF Explorer: A VSCode extension that helps you visualize and triage static analysis results
static-analysis vscode-extension sarif
static-analysis vscode-extension sarif
TypeScript
•
GNU General Public License v3.0
•9•50•6•9•Updated May 1, 2026May 1, 2026
skills
Public
Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
agent-skills
agent-skills
Python
•
Creative Commons Attribution Share Alike 4.0 International
•430•5k•16•6•Updated May 1, 2026May 1, 2026
are-we-pep740-yet
Public
Are we PEP 740 yet?
HTML
•
BSD 2-Clause "Simplified" License
•6•10•1•0•Updated May 1, 2026May 1, 2026
it-depends
Public
A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositories.
dependency-analysis dependency-graph hacktoberfest
dependency-analysis dependency-graph hacktoberfest vulnerability-scanner sbom hacktoberfest2021 sbom-generator sbom-tool
Python
•
GNU Lesser General Public License v3.0
•24•390•8•2•Updated May 1, 2026May 1, 2026
vscode-weaudit
Public
Create code bookmarks and code highlights with a click.
TypeScript
•
GNU General Public License v3.0
•31•232•15•15•Updated Apr 30, 2026Apr 30, 2026
OCP-Security-SAFE
Public
Standardization of security reviews for datacenter products
Python
•
MIT License
•37•0•0•0•Updated Apr 30, 2026Apr 30, 2026
publications
Public
Publications from Trail of Bits
conference-presentations academic-papers security-reviews
conference-presentations academic-papers security-reviews
Python
•
Creative Commons Attribution Share Alike 4.0 International
•227•1.8k•0•4•Updated Apr 30, 2026Apr 30, 2026
mquire
Public
Zero-dependency Linux memory forensics PoC — leverages kernel-embedded BTF and kallsyms for type-aware memory analysis without external debug info.
linux rust sql
linux rust sql kernel memory forensics
Rust
•
Apache License 2.0
•7•152•3•1•Updated Apr 30, 2026Apr 30, 2026
mishegos
Public
A differential fuzzer for x86 decoders
x86 fuzzing hacktoberfest
x86 fuzzing hacktoberfest
C++
•
Apache License 2.0
•30•269•9•1•Updated Apr 30, 2026Apr 30, 2026
test-fuzz
Public
To make fuzzing Rust easy
testing rust fuzzing
testing rust fuzzing
Rust
•
GNU Affero General Public License v3.0
•26•203•7•1•Updated Apr 30, 2026Apr 30, 2026
gosentry
Public
Security-oriented Go toolchain, focused on state-of-the-art fuzzing capabilities.
go nautilus fuzzing
go nautilus fuzzing goleak libafl
Go
•
BSD 3-Clause "New" or "Revised" License
•19k•34•1•0•Updated Apr 30, 2026Apr 30, 2026
testing-handbook
Public
Trail of Bits Testing Handbook - appsec.guide
Rust
•
Creative Commons Attribution 4.0 International
•20•117•19•6•Updated Apr 30, 2026Apr 30, 2026
go-panikint
Public
It's the Go compiler, but it panics on arithmetic and truncation issues.
go golang arithmetic
go golang arithmetic fuzzing truncation
Go
•
BSD 3-Clause "New" or "Revised" License
•19k•43•1•0•Updated Apr 29, 2026Apr 29, 2026
trailmark
Public
Build and query a graph database representation of source code
C
•
Apache License 2.0
•16•325•3•0•Updated Apr 29, 2026Apr 29, 2026
algo
Public
Set up a personal VPN in the cloud
security ansible encryption
security ansible encryption ipsec vpn vpn-server vpn-client ikev2 strongswan ssh-tunnel
Python
•
GNU Affero General Public License v3.0
•2.4k•30k•66•5•Updated Apr 29, 2026Apr 29, 2026
mewt
Public
mewt is a mutation testing framework
C
•
GNU Affero General Public License v3.0
•1•31•0•5•Updated Apr 29, 2026Apr 29, 2026
cargo-line-test
Public
Run tests by the lines they exercise
testing rust
testing rust
Rust
•2•8•2•0•Updated Apr 29, 2026Apr 29, 2026
elaborate
Public
Wrappers for standard library functions and types to produce more elaborate error messages
rust error-messages
rust error-messages
Rust
•
Apache License 2.0
•1•5•2•1•Updated Apr 29, 2026Apr 29, 2026
vsix-audit
Public
Security scanner for VS Code extensions
security vscode vscode-extension
security vscode vscode-extension
TypeScript
•
GNU Affero General Public License v3.0
•3•11•0•6•Updated Apr 28, 2026Apr 28, 2026
dropkit
Public
A CLI tool for managing DigitalOcean droplets with automated setup, SSH configuration, and lifecycle management.
Python
•
Apache License 2.0
•14•115•2•3•Updated Apr 28, 2026Apr 28, 2026
anchor-coverage
Public
A wrapper around `anchor test` for computing test coverage
testing coverage anchor
testing coverage anchor solana
Rust
•
GNU Affero General Public License v3.0
•6•15•4•1•Updated Apr 28, 2026Apr 28, 2026

ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Trail of Bits

All

All

270 repositories

pasta

dylint

build-wrap

cast_checks

cargo-unmaintained

monorepo-code-scanning-action

scribe

gh-action-adapt-sigstore-pypi

multiplier

vscode-sarif-explorer

skills

are-we-pep740-yet

it-depends

vscode-weaudit

OCP-Security-SAFE

publications

mquire

mishegos

test-fuzz

gosentry

testing-handbook

go-panikint

trailmark

algo

mewt

cargo-line-test

elaborate

vsix-audit

dropkit

anchor-coverage

All

All

Repositories list

270 repositories