Skip to content
View TheVoidThatConsumes's full-sized avatar
💫
Evolving
💫
Evolving
5 followers · 6 following

Block or report TheVoidThatConsumes

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
TheVoidThatConsumes/README.md

Currently building:

 ██████╗  ██████╗ ███████╗███████╗ █████╗ ███╗   ███╗███████╗██████╗
██╔════╝ ██╔═══██╗██╔════╝██╔════╝██╔══██╗████╗ ████║██╔════╝██╔══██╗
██║  ███╗██║   ██║███████╗███████╗███████║██╔████╔██║█████╗  ██████╔╝
██║   ██║██║   ██║╚════██║╚════██║██╔══██║██║╚██╔╝██║██╔══╝  ██╔══██╗
╚██████╔╝╚██████╔╝███████║███████║██║  ██║██║ ╚═╝ ██║███████╗██║  ██║
 ╚═════╝  ╚═════╝ ╚══════╝╚══════╝╚═╝  ╚═╝╚═╝     ╚═╝╚══════╝╚═╝  ╚═╝

A lightweight software supply chain security suite.

Components

Project Description Status
tokenwatch Detects secrets and credential exposure across a repository's entire Git history. ✅
pipewatch Audits CI/CD pipelines for tampering, insecure workflows, and integrity drift. ✅
VSac, formerly XBOM Threat intelligence, dependency analysis, SBOM generation, and vulnerability correlation. ✅
Molt Configuration drift detection, artifact verification, and container security. 🚧
Web Unified dashboard aggregating findings across the GOSSAMER ecosystem. 🚧

Pinned Loading

  1. vsac vsac Public

    A CVE scanning, SBOM generation and signed threat correlation tool (formerly XBOM) for the Gossamer Suite. Built with Python, 2026.

    Python 1

  2. pipewatch pipewatch Public

    A CLI integrity monitor that detects tampered workflow files, unpinned action references and unexpected runner environment changes between CI runs. Built with Python, 2026.

    Python 1

  3. tokenwatch tokenwatch Public

    A command-line tool that scans a repository for accidentally committed secrets by running against the current working tree or the full git history. Built with Python, 2026.

    Python 2

  4. suReader suReader Public

    A command-line tool for analysing Suricata EVE JSON alert logs and converts them to .txt readable output for SIEM analysis. Built with Python, 2026.

    Python 1

  5. pwnkit pwnkit Public

    A command-line tool that tests the safety of a password using hashing algorithms and lazy-loaded database lookups. Built with Python, 2026.

    Python 1

  6. AuthWiki_Team4 AuthWiki_Team4 Public

    Forked from zuri-training/AuthWiki_Team4

    An authentication code library for different code stacks

    PHP 1