Preflight Logo

Preflight

0
Free
Visit Website

Preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack. First of all, it's the chicken and the egg. How do you pull a legit preflight binary from us without verifying it with preflight? The best way is to grab the source, compile it yourself, and use your own binary which you put in a place that you trust. People usually have several options of how to do that safely: Put it on your own S3 bucket, Drop it on your own Artifactory or similar, Push it directly into your repos (it should be as small as 4mb and almost never change so Git should work nicely with it), Build from source into your containers directly: FROM golang:1.16-alpine AS preflight_builder RUN apk add --no-cache git WORKDIR /builds RUN GOBIN=`pwd` go get -u github.com/spectralops/preflight # Build from a bare image, copy built binary FROM alpine:3.9 RUN apk add ca-certificates COPY --from=preflight_builder /builds/preflight /usr/local/bin # use preflight as you wish RUN curl https://.. |

FEATURES

ALTERNATIVES

A Python tool for patching Dalvik bytecode in DEX files and assisting in Android application analysis

DroidBox is a tool for dynamic analysis of Android applications, providing insights into package behavior and security.

Industrial control system automation and testing tool for SCADA security testing.

Tools and documentation for validating hardware security requirements on x86 platforms, including bootable USB key creation and platform configuration verification.

Alternative marketplace for mobile applications with package ID metadata retrieval and APK download capabilities.

Scans SPF and DMARC records for issues that could allow email spoofing.

Innovative tool for mobile security researchers to analyze targets with static and dynamic analysis capabilities and sharing functionalities.

Steghide is a steganography program for hiding data in image and audio files.