Github Repository security score

A python application to scan github repositories and assign a security score based on different well-defined security criterias and provides recommendation to improve the score

Scoring Factors

• Vulnerability in dependencies
• Outdated Dependencies
• Leaked secrets
• Repository Activity
• CI/CD misconfigurations*
• OWASP Score*
• Dependency popularity*

Installation

1. Install uv from here
2. Install dependencies

   $ uv sync

3. Activate virtual env created by uv

   $ source .venv/bin/activate

Usages

$ uv run main.py --url <GITHUB_REPO_URL>