Repositories list

• DjanGoat

  Public
  Python and Django implementation of the OWASP RailsGoat project

  django-applicationowasp-top-ten

  django-applicationowasp-top-ten

  Python

  •

  MIT License

  •7474 forks in Contrast-Security-OSS/DjanGoat•7777 stars in Contrast-Security-OSS/DjanGoat•11 issue in Contrast-Security-OSS/DjanGoat•1515 pull requests in Contrast-Security-OSS/DjanGoat•Updated Oct 25, 2026Oct 25, 2026

• rbac_migration

  Public
  From mark lacasse repo

  Python

  •

  MIT License

  •00 forks in Contrast-Security-OSS/rbac_migration•00 stars in Contrast-Security-OSS/rbac_migration•00 issues in Contrast-Security-OSS/rbac_migration•66 pull requests in Contrast-Security-OSS/rbac_migration•Updated Oct 25, 2026Oct 25, 2026

• integration-verify-github-action

  Public
  GitHub Action to verify an application by determining whether the application violates a job outcome policy or threshold of open vulnerabilities

  verifysecuritycontrast+ 2

  verifysecuritycontrastassessgithub-actions

  Python

  •

  MIT License

  •55 forks in Contrast-Security-OSS/integration-verify-github-action•55 stars in Contrast-Security-OSS/integration-verify-github-action•11 issue in Contrast-Security-OSS/integration-verify-github-action•22 pull requests in Contrast-Security-OSS/integration-verify-github-action•Updated Oct 24, 2026Oct 24, 2026

• agent-operator-images

  Public
  Images of agents for the agent-operator.

  Dockerfile

  •

  Other

  •44 forks in Contrast-Security-OSS/agent-operator-images•11 star in Contrast-Security-OSS/agent-operator-images•00 issues in Contrast-Security-OSS/agent-operator-images•88 pull requests in Contrast-Security-OSS/agent-operator-images•Updated Oct 23, 2026Oct 23, 2026

• agent-operator

  Public
  A K8s operator to inject agents into existing K8s workloads.

  C#

  •

  Other

  •88 forks in Contrast-Security-OSS/agent-operator•1818 stars in Contrast-Security-OSS/agent-operator•11 issue in Contrast-Security-OSS/agent-operator•44 pull requests in Contrast-Security-OSS/agent-operator•Updated Oct 23, 2026Oct 23, 2026

• mcp-contrast

  Public
  MCP Server for Contrast Security

  Java

  •

  Apache License 2.0

  •66 forks in Contrast-Security-OSS/mcp-contrast•2323 stars in Contrast-Security-OSS/mcp-contrast•00 issues in Contrast-Security-OSS/mcp-contrast•66 pull requests in Contrast-Security-OSS/mcp-contrast•Updated Oct 23, 2026Oct 23, 2026

• otel-microservices-demo

  Public
  This repository contains the OpenTelemetry Astronomy Shop, a microservice-based distributed system intended to illustrate the implementation of OpenTelemetry in…

  TypeScript

  •

  Apache License 2.0

  •7.4k7.4k forks in Contrast-Security-OSS/otel-microservices-demo•00 stars in Contrast-Security-OSS/otel-microservices-demo•00 issues in Contrast-Security-OSS/otel-microservices-demo•1111 pull requests in Contrast-Security-OSS/otel-microservices-demo•Updated Oct 23, 2026Oct 23, 2026

• opentelemetry-demo

  Public
  This repository contains the OpenTelemetry Astronomy Shop, a microservice-based distributed system intended to illustrate the implementation of OpenTelemetry in…

  TypeScript

  •

  Apache License 2.0

  •7.4k7.4k forks in Contrast-Security-OSS/opentelemetry-demo•11 star in Contrast-Security-OSS/opentelemetry-demo•00 issues in Contrast-Security-OSS/opentelemetry-demo•1212 pull requests in Contrast-Security-OSS/opentelemetry-demo•Updated Oct 22, 2026Oct 22, 2026

• NodeTestBenches

  Public
  A collection of intentionally vulnerable test bench applications for testing the Contrast Security Node Agent.

  JavaScript

  •66 forks in Contrast-Security-OSS/NodeTestBenches•1010 stars in Contrast-Security-OSS/NodeTestBenches•11 issue in Contrast-Security-OSS/NodeTestBenches•1212 pull requests in Contrast-Security-OSS/NodeTestBenches•Updated Oct 20, 2026Oct 20, 2026

• contrast-teamserver-api-docs

  Public
  fsg-ts

  fsg-ts

  11 fork in Contrast-Security-OSS/contrast-teamserver-api-docs•44 stars in Contrast-Security-OSS/contrast-teamserver-api-docs•00 issues in Contrast-Security-OSS/contrast-teamserver-api-docs•33 pull requests in Contrast-Security-OSS/contrast-teamserver-api-docs•Updated Oct 19, 2026Oct 19, 2026

• runtime-analyst

  Public
  Generate CycloneDX CBOM, AIBOM, and VEX reports along with AI interpretations based on Contrast Security observations

  Java

  •00 forks in Contrast-Security-OSS/runtime-analyst•00 stars in Contrast-Security-OSS/runtime-analyst•00 issues in Contrast-Security-OSS/runtime-analyst•33 pull requests in Contrast-Security-OSS/runtime-analyst•Updated Oct 14, 2026Oct 14, 2026

• contrast-go-installer

  Public
  install contrast-go from the command line

  Go

  •

  Other

  •11 fork in Contrast-Security-OSS/contrast-go-installer•00 stars in Contrast-Security-OSS/contrast-go-installer•00 issues in Contrast-Security-OSS/contrast-go-installer•44 pull requests in Contrast-Security-OSS/contrast-go-installer•Updated Oct 14, 2026Oct 14, 2026

• universal-forwarder-grafana-loki

  Public
  Example configuration to send events from Contrast's Universal Forwarder to Grafana Loki

  dockerdocker-composevector+ 12

  dockerdocker-composevectorgrafanacontrastdatadogsiemadrraspprotect+ 5

  Go Template

  •00 forks in Contrast-Security-OSS/universal-forwarder-grafana-loki•11 star in Contrast-Security-OSS/universal-forwarder-grafana-loki•00 issues in Contrast-Security-OSS/universal-forwarder-grafana-loki•22 pull requests in Contrast-Security-OSS/universal-forwarder-grafana-loki•Updated Oct 13, 2026Oct 13, 2026

• contrast-ci

  Public
  Shared GitHub Action workflow for Contrast Smart products (SmartScan, SmartSCA, SmartFix)

  00 forks in Contrast-Security-OSS/contrast-ci•00 stars in Contrast-Security-OSS/contrast-ci•00 issues in Contrast-Security-OSS/contrast-ci•33 pull requests in Contrast-Security-OSS/contrast-ci•Updated Oct 12, 2026Oct 12, 2026

• contrast-local-scan-action

  Public
  Contrast Local Scanner Github action

  JavaScript

  •

  Apache License 2.0

  •22 forks in Contrast-Security-OSS/contrast-local-scan-action•11 star in Contrast-Security-OSS/contrast-local-scan-action•00 issues in Contrast-Security-OSS/contrast-local-scan-action•1616 pull requests in Contrast-Security-OSS/contrast-local-scan-action•Updated Oct 10, 2026Oct 10, 2026

• contrast-sca-action

  Public
  Contrast SCA GitHub Action

  sca

  sca

  Apache License 2.0

  •55 forks in Contrast-Security-OSS/contrast-sca-action•1212 stars in Contrast-Security-OSS/contrast-sca-action•11 issue in Contrast-Security-OSS/contrast-sca-action•33 pull requests in Contrast-Security-OSS/contrast-sca-action•Updated Oct 6, 2026Oct 6, 2026

• ai-transparency

  Public
  Contrast Security AI Transparency page — documenting AI features, models, data handling, and security controls

  CSS

  •00 forks in Contrast-Security-OSS/ai-transparency•00 stars in Contrast-Security-OSS/ai-transparency•00 issues in Contrast-Security-OSS/ai-transparency•22 pull requests in Contrast-Security-OSS/ai-transparency•Updated Oct 5, 2026Oct 5, 2026

• contrast-sdk-javascript

  Public
  JavaScript

  •11 fork in Contrast-Security-OSS/contrast-sdk-javascript•11 star in Contrast-Security-OSS/contrast-sdk-javascript•00 issues in Contrast-Security-OSS/contrast-sdk-javascript•55 pull requests in Contrast-Security-OSS/contrast-sdk-javascript•Updated Oct 5, 2026Oct 5, 2026

• java-buildpack

  Public
  Cloud Foundry buildpack for running Java applications

  Ruby

  •

  Apache License 2.0

  •2.5k2.5k forks in Contrast-Security-OSS/java-buildpack•00 stars in Contrast-Security-OSS/java-buildpack•00 issues in Contrast-Security-OSS/java-buildpack•55 pull requests in Contrast-Security-OSS/java-buildpack•Updated Sep 26, 2026Sep 26, 2026

• cargo-cats

  Public
  HTML

  •1717 forks in Contrast-Security-OSS/cargo-cats•44 stars in Contrast-Security-OSS/cargo-cats•11 issue in Contrast-Security-OSS/cargo-cats•55 pull requests in Contrast-Security-OSS/cargo-cats•Updated Sep 22, 2026Sep 22, 2026

• helm-charts

  Public
  Charts, Helm Chats everywhere!

  TypeScript

  •00 forks in Contrast-Security-OSS/helm-charts•00 stars in Contrast-Security-OSS/helm-charts•00 issues in Contrast-Security-OSS/helm-charts•66 pull requests in Contrast-Security-OSS/helm-charts•Updated Sep 11, 2026Sep 11, 2026

• find-package-json

  Public
  Look up through directories to find package.json

  JavaScript

  •00 forks in Contrast-Security-OSS/find-package-json•00 stars in Contrast-Security-OSS/find-package-json•00 issues in Contrast-Security-OSS/find-package-json•44 pull requests in Contrast-Security-OSS/find-package-json•Updated Sep 11, 2026Sep 11, 2026

• eslint-config

  Public
  Base eslint configuration for Contrast Node projects

  JavaScript

  •00 forks in Contrast-Security-OSS/eslint-config•00 stars in Contrast-Security-OSS/eslint-config•00 issues in Contrast-Security-OSS/eslint-config•44 pull requests in Contrast-Security-OSS/eslint-config•Updated Sep 9, 2026Sep 9, 2026

• svn-to-github-migration-contrast-code

  Public
  this is to help move code from svn in a pipeline to github, so that contrast code can scan it.

  Shell

  •00 forks in Contrast-Security-OSS/svn-to-github-migration-contrast-code•00 stars in Contrast-Security-OSS/svn-to-github-migration-contrast-code•00 issues in Contrast-Security-OSS/svn-to-github-migration-contrast-code•11 pull request in Contrast-Security-OSS/svn-to-github-migration-contrast-code•Updated Aug 27, 2026Aug 27, 2026

• contrast-ai-smartfix-action

  Public
  A dev repo for the Contrast AI SmartFix GitHub action

  Python

  •11 fork in Contrast-Security-OSS/contrast-ai-smartfix-action•77 stars in Contrast-Security-OSS/contrast-ai-smartfix-action•00 issues in Contrast-Security-OSS/contrast-ai-smartfix-action•1212 pull requests in Contrast-Security-OSS/contrast-ai-smartfix-action•Updated Aug 27, 2026Aug 27, 2026

• demo-webgoat.net

  Public
  C#

  •44 forks in Contrast-Security-OSS/demo-webgoat.net•22 stars in Contrast-Security-OSS/demo-webgoat.net•00 issues in Contrast-Security-OSS/demo-webgoat.net•33 pull requests in Contrast-Security-OSS/demo-webgoat.net•Updated Aug 26, 2026Aug 26, 2026

• eShopOnWeb

  Public
  Sample ASP.NET Core 3.1 reference application, powered by Microsoft, demonstrating a layered application architecture with monolithic deployment model. Download…

  C#

  •

  MIT License

  •6.1k6.1k forks in Contrast-Security-OSS/eShopOnWeb•11 star in Contrast-Security-OSS/eShopOnWeb•00 issues in Contrast-Security-OSS/eShopOnWeb•77 pull requests in Contrast-Security-OSS/eShopOnWeb•Updated Aug 26, 2026Aug 26, 2026

• contrast-generated-reports

  Public
  Using just the mcp server, generated some reports that show the capabilities.

  HTML

  •00 forks in Contrast-Security-OSS/contrast-generated-reports•33 stars in Contrast-Security-OSS/contrast-generated-reports•00 issues in Contrast-Security-OSS/contrast-generated-reports•33 pull requests in Contrast-Security-OSS/contrast-generated-reports•Updated Aug 19, 2026Aug 19, 2026

• vulnpy

  Public archive
  Purposely-vulnerable Python functions

  Python

  •

  MIT License

  •8787 forks in Contrast-Security-OSS/vulnpy•1818 stars in Contrast-Security-OSS/vulnpy•00 issues in Contrast-Security-OSS/vulnpy•00 pull requests in Contrast-Security-OSS/vulnpy•Updated Aug 18, 2026Aug 18, 2026

• demo-nodegoat

  Public
  HTML

  •

  Apache License 2.0

  •77 forks in Contrast-Security-OSS/demo-nodegoat•22 stars in Contrast-Security-OSS/demo-nodegoat•00 issues in Contrast-Security-OSS/demo-nodegoat•88 pull requests in Contrast-Security-OSS/demo-nodegoat•Updated Aug 6, 2026Aug 6, 2026