Repositories list

• dylint

  Public
  Run Rust lints from dynamic libraries

  rustlinting

  Rust

  •

  Apache License 2.0

  •42•448•41•10•Updated May 14, 2025May 14, 2025

• sigstore-rekor-types

  Public
  Python models for Rekor's API types

  Python

  •

  Apache License 2.0

  •2•6•1•2•Updated May 14, 2025May 14, 2025

• pylock-attestations

  Public
  CLI tool to add attestation identities to `pylock.toml` files

  Python

  •

  Apache License 2.0

  •0•0•3•0•Updated May 14, 2025May 14, 2025

• rfc3161-client

  Public
  An Opinionated Python RFC3161 Client

  rfc3161timestamp-protocol

  Rust

  •

  Apache License 2.0

  •4•2•1•1•Updated May 14, 2025May 14, 2025

• codeql-queries

  Public
  CodeQL queries developed by Trail of Bits

  CodeQL

  •

  GNU Affero General Public License v3.0

  •3•97•5•4•Updated May 14, 2025May 14, 2025

• go-mutexasserts

  Public
  A small library that allows to check if Go mutexes are locked

  Go

  •

  MIT License

  •3•26•0•0•Updated May 14, 2025May 14, 2025

• awesome-ml-security

  Public
  machine-learning

  Creative Commons Attribution 4.0 International

  •18•130•1•1•Updated May 13, 2025May 13, 2025

• necessist

  Public
  A mutation-based tool for finding bugs in tests

  testingmutation

  Rust

  •

  GNU Affero General Public License v3.0

  •17•116•18•0•Updated May 13, 2025May 13, 2025

• build-wrap

  Public
  Help protect against malicious build scripts

  rustsandboxingbuild-scripts

  Rust

  •

  GNU Affero General Public License v3.0

  •3•13•0•1•Updated May 13, 2025May 13, 2025

• cargo-unmaintained

  Public
  Find unmaintained packages in Rust projects

  rustunmaintainedpackage-management

  Rust

  •

  GNU Affero General Public License v3.0

  •13•74•7•2•Updated May 12, 2025May 12, 2025

• anchor-coverage

  Public
  A wrapper around `anchor test` for computing test coverage

  testingcoverageanchor+ 1solana

  Rust

  •

  GNU Affero General Public License v3.0

  •1•2•2•4•Updated May 12, 2025May 12, 2025

• cargo-line-test

  Public
  Run tests by the lines they exercise

  testingrust

  Rust

  •3•6•2•4•Updated May 12, 2025May 12, 2025

• siderophile

  Public
  Find the ideal fuzz targets in a Rust codebase

  fuzzingprogram-analysissecurity-testing+ 1rust

  Rust

  •

  MIT License

  •12•214•12•11•Updated May 12, 2025May 12, 2025

• publications

  Public
  Publications from Trail of Bits

  conference-presentationsacademic-paperssecurity-reviews

  Python

  •

  Creative Commons Attribution Share Alike 4.0 International

  •192•1.6k•3•3•Updated May 9, 2025May 9, 2025

• instafix-llvm

  Public
  LLVM fork for INSTAFIX

  LLVM

  •

  Other

  •13k•2•0•13•Updated May 9, 2025May 9, 2025

• cookiecutter-python

  Public
  A cookiecutter template for a best-practices Python project

  Python

  •

  Apache License 2.0

  •5•16•0•1•Updated May 8, 2025May 8, 2025

• test-fuzz

  Public
  To make fuzzing Rust easy

  testingrustfuzzing

  Rust

  •

  GNU Affero General Public License v3.0

  •26•177•11•3•Updated May 8, 2025May 8, 2025

• check-up-to-dateness

  Public
  Check whether a merge group PR is up to date relative to its base branch

  github-actionmerge-queue

  Shell

  •1•0•0•0•Updated May 6, 2025May 6, 2025

• pypi-attestations

  Public
  A library to convert between Sigstore Bundles and PEP 740 Attestation objects

  Python

  •

  Apache License 2.0

  •5•9•6•0•Updated May 2, 2025May 2, 2025

• are-we-pep740-yet

  Public
  Are we PEP 740 yet?

  HTML

  •

  BSD 2-Clause "Simplified" License

  •6•9•0•0•Updated May 1, 2025May 1, 2025

• mcp-figma

  Public
  JavaScript

  •5•0•0•1•Updated Apr 29, 2025Apr 29, 2025

• CompChomper

  Public
  CompChomper is a framework for measuring how LLMs perform at code completion.

  Python

  •

  Apache License 2.0

  •0•19•0•1•Updated Apr 29, 2025Apr 29, 2025

• pip-plugin-pep740

  Public
  An implementation of a pip plugin that verifies PEP-740 attestations before installing a package, and aborts the installation if verification fails.

  Python

  •

  Apache License 2.0

  •0•2•1•0•Updated Apr 29, 2025Apr 29, 2025

• zkdocs

  Public
  Interactive documentation on zero-knowledge proof systems and related primitives.

  cryptographyzero-knowledge

  HTML

  •

  Creative Commons Attribution 4.0 International

  •50•155•6•9•Updated Apr 28, 2025Apr 28, 2025

• fickling

  Public
  A Python pickling decompiler and static analyzer

  machine-learningpythonsecurity

  Python

  •

  GNU Lesser General Public License v3.0

  •55•502•15•7•Updated Apr 28, 2025Apr 28, 2025

• gh-action-adapt-sigstore-pypi

  Public
  Python

  •

  Apache License 2.0

  •0•1•0•1•Updated Apr 28, 2025Apr 28, 2025

• polyfile

  Public
  A pure Python cleanroom implementation of libmagic, with instrumented parsing from Kaitai struct and an interactive hex viewer

  file-format-detectionlibmagicfile-formats+ 2polyglotspython

  Python

  •

  Apache License 2.0

  •23•353•18•1•Updated Apr 28, 2025Apr 28, 2025

• vast

  Public
  VAST is an experimental compiler pipeline designed for program analysis of C and C++. It provides a tower of IRs as MLIR dialects to choose the best fit representations for a program analysis or further program abstraction.

  ccppclang+ 5compilersprogram-analysisintermediate-representationcompiler-frontendmlir

  C++

  •

  Apache License 2.0

  •29•418•168•3•Updated Apr 24, 2025Apr 24, 2025

• empirehacking.nyc

  Public
  Empire Hacking NYC Meetup

  security-meetupnyc

  CSS

  •8•6•0•0•Updated Apr 22, 2025Apr 22, 2025

• nyc-infosec

  Public
  Mapping the NYC Infosec Community

  meetupuniversitycalendar+ 2nycconference

  CSS

  •20•54•0•0•Updated Apr 22, 2025Apr 22, 2025