sarif — independent software & tools

3 independent sarif listings the big search engines bury.

• patient-zero

  github · Free · by 0xSteph

  Supply-chain attack scanner for the agent era. Triage in 30s with `npx patient-zero`, block malicious installs before postinstall runs, or drop into CI as a GitHub Action. Covers npm + Python + MCP agent configs. Free, MIT, no signup, no telemetry.

• snitch

  github · Free · by n4uu

  Single static-binary recon orchestrator in Go: chains subfinder, httpx, nmap, nuclei, ffuf, katana + injection testing (dalfox/crlfuzz/sqlmap), with dedup, diff-based webhook alerts, an interactive TUI and JSON/CSV/SARIF export.

• markdownlint-obsidian

  npm · Free · by GitHub Actions

  Obsidian Flavored Markdown linting engine — programmatic API and rule set