Preflight Logo

Preflight

0
Free
Visit Website

Preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack. First of all, it's the chicken and the egg. How do you pull a legit preflight binary from us without verifying it with preflight? The best way is to grab the source, compile it yourself, and use your own binary which you put in a place that you trust. People usually have several options of how to do that safely: Put it on your own S3 bucket, Drop it on your own Artifactory or similar, Push it directly into your repos (it should be as small as 4mb and almost never change so Git should work nicely with it), Build from source into your containers directly: FROM golang:1.16-alpine AS preflight_builder RUN apk add --no-cache git WORKDIR /builds RUN GOBIN=`pwd` go get -u github.com/spectralops/preflight # Build from a bare image, copy built binary FROM alpine:3.9 RUN apk add ca-certificates COPY --from=preflight_builder /builds/preflight /usr/local/bin # use preflight as you wish RUN curl https://.. |

FEATURES

ALTERNATIVES

Android vulnerability analysis system with efficient scanning and high accuracy.

Python tool for monitoring user-select APIs in Android apps using Frida.

A Python tool for patching Dalvik bytecode in DEX files and assisting in Android application analysis

BusKill is a laptop kill cord that can trigger your computer to lock or shutdown when it's physically separated from you.

A search engine for the Internet of Things (IoT) that discovers and monitors devices connected to the internet.

Tools and documentation for validating hardware security requirements on x86 platforms, including bootable USB key creation and platform configuration verification.

A data-mining and deep web asset search engine for breach analysis and prevention services.

A Graphical Realism Framework for Industrial Control Simulation organized as 5 VirtualBox VMs for realistic ICS network simulation.