Skip to content
View TheVoidThatConsumes's full-sized avatar
💫
Evolving
💫
Evolving
3 followers · 4 following

Block or report TheVoidThatConsumes

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
TheVoidThatConsumes/README.md

Currently building:

 ██████╗  ██████╗ ███████╗███████╗ █████╗ ███╗   ███╗███████╗██████╗
██╔════╝ ██╔═══██╗██╔════╝██╔════╝██╔══██╗████╗ ████║██╔════╝██╔══██╗
██║  ███╗██║   ██║███████╗███████╗███████║██╔████╔██║█████╗  ██████╔╝
██║   ██║██║   ██║╚════██║╚════██║██╔══██║██║╚██╔╝██║██╔══╝  ██╔══██╗
╚██████╔╝╚██████╔╝███████║███████║██║  ██║██║ ╚═╝ ██║███████╗██║  ██║
 ╚═════╝  ╚═════╝ ╚══════╝╚══════╝╚═╝  ╚═╝╚═╝     ╚═╝╚══════╝╚═╝  ╚═╝

A lightweight software supply chain security suite.

Components

Project Description Status
tokenwatch Detects secrets and credential exposure across a repository's entire Git history. ✅
pipewatch Audits CI/CD pipelines for tampering, insecure workflows, and integrity drift. ✅
VSac, currently XBOM Threat intelligence, dependency analysis, SBOM generation, and vulnerability correlation. 🚧
Molt Configuration drift detection, artifact verification, and container security. 🚧
Web Unified dashboard aggregating findings across the GOSSAMER ecosystem. 🚧

Pinned Loading

  1. pipewatch pipewatch Public

    A CLI integrity monitor that detects tampered workflow files, unpinned action references and unexpected runner environment changes between CI runs. Built with Python, 2026.

    Python 1

  2. tokenwatch tokenwatch Public

    A command-line tool that scans a repository for accidentally committed secrets by running against the current working tree or the full git history. Built with Python, 2026.

    Python 2

  3. XBOM XBOM Public

    A command-line tool for scanning Python projects for CVEs, supply chain attacks and generating SBOMs (Software Bill of Materials). Built with Python, 2026.

    Python 1

  4. suReader suReader Public

    A command-line tool for analysing Suricata EVE JSON alert logs and converts them to .txt readable output for SIEM analysis. Built with Python, 2026.

    Python 1

  5. pwnkit pwnkit Public

    A command-line tool that tests the safety of a password using hashing algorithms and lazy-loaded database lookups. Built with Python, 2026.

    Python 1

  6. AuthWiki_Team4 AuthWiki_Team4 Public

    Forked from zuri-training/AuthWiki_Team4

    An authentication code library for different code stacks

    PHP 1