Topics / #audit

Audit projects on GitHub

Auditing security, compliance, and quality of systems and code.

As of , the most-starred Audit projects on GitHub are ansible (71K stars), lighthouse (30.9K stars) and iFixAi (28.9K stars). GitHub.Locker tracks 17 Audit repositories with 221.4K stars combined. The fastest-growing on October 16 was iFixAi, with +458 stars in a day.

17Projects
221.4KStars in total
+520Stars in a day
Browse in the catalog →github.com/topics/audit ↗

Hot right now

Most stars gained in a day · Oct 16

+458

iFixAi

ifixai-ai/iFixAi · ★ 28.9K

iFixAi is an independent auditing tool for AI agents: it runs a diagnostic suite against your agent and answers the core question — is the agent doing the job it is supposed to do — with an A-F grade in under 120 seconds.

+17

ansible

ansible/ansible · ★ 71K

Ansible is a radically simple IT automation system for configuration management, application deployment, cloud provisioning, ad-hoc tasks, network automation, and multi-node orchestration.

+14

chat-archive-guard

MaxHu-xuan/chat-archive-guard · ★ 858

ChatArchiveGuard is a local, read-only CLI auditor you run on an AI chat export before sharing, migrating, or archiving it. It flags likely secrets and personal-data patterns, finds malformed UTF-8/JSON/JSONL, checks SQLite integrity, and reports scan coverage gaps.

+7

EarTrumpet

File-New-Project/EarTrumpet · ★ 11.4K

EarTrumpet is a volume control app for Windows that replaces the default system volume mixer, giving you per-app volume sliders, device switching, and more from the system tray.

The all-time top

17 projects · by stars

  1. #1 · ansible/ansible

    ansible

    Ansible is a radically simple IT automation system for configuration management, application deployment, cloud provisioning, ad-hoc tasks, network automation, and multi-node orchestration.

    71K
  2. #2 · GoogleChrome/lighthouse

    lighthouse

    Lighthouse is an open-source web auditing tool from Google: it runs a page through automated checks, collects modern performance metrics and best-practice insights, and turns them into a scored report.

    30.9K
  3. #3 · ifixai-ai/iFixAi

    iFixAi

    iFixAi is an independent auditing tool for AI agents: it runs a diagnostic suite against your agent and answers the core question — is the agent doing the job it is supposed to do — with an A-F grade in under 120 seconds.

    28.9K
  1. 4

    teleport

    21Kgravitational/teleport · Go

    Teleport is an open-source access platform for infrastructure: connectivity, authentication, access controls and audit for servers, Kubernetes, databases, desktops and web apps — without long-lived keys or passwords.

  2. 5

    lynis

    16.5KCISOfy/lynis · Shell

    Lynis is a security auditing and hardening tool for Linux, macOS, BSD, and other Unix-like systems. It scans the host it runs on for vulnerable software, misconfigurations, and weak settings, and gives hardening tips while also assisting with compliance testing (HIPAA, ISO27001, PCI DSS).

  3. 6

    fluentd

    13.6Kfluent/fluentd · Ruby

    Fluentd is an open-source log collector that sits at the center of your logging setup: it gathers events from many data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and more.

  4. 7

    EarTrumpet

    11.4KFile-New-Project/EarTrumpet · C#

    EarTrumpet is a volume control app for Windows that replaces the default system volume mixer, giving you per-app volume sliders, device switching, and more from the system tray.

  5. 8

    the-practical-linux-hardening-guide

    10.9Ktrimstray/the-practical-linux-hardening-guide

    A free, practical guide to hardening GNU/Linux servers for production. It offers step-by-step instructions built on industry standards (CIS, STIG, NIST) and OpenSCAP baselines.

  6. 9

    Amphion

    10.3Kopen-mmlab/Amphion · Python

    An open-source toolkit for audio, music, and speech generation. It is built to support reproducible research and help junior researchers and engineers get started in the field.

  7. 10

    cli

    5.2Kentireio/cli · Go

    Entire is a CLI that hooks into your Git workflow to capture AI coding agent sessions (prompts, responses, files touched) and indexes them alongside your commits, creating a searchable record of how code was written.

  8. 11

    chat-archive-guard

    858MaxHu-xuan/chat-archive-guard · Python

    ChatArchiveGuard is a local, read-only CLI auditor you run on an AI chat export before sharing, migrating, or archiving it. It flags likely secrets and personal-data patterns, finds malformed UTF-8/JSON/JSONL, checks SQLite integrity, and reports scan coverage gaps.

  9. 12

    GDecay

    197shivanipoddariiith/GDecay · Python

    GrantDecay is a CLI tool that finds privilege that was granted but never used. It compares an entitlement export (who holds which permissions) against an access log export covering a time window, then reports unused permissions, narrowable roles, dormant principals, and ungranted use.

  10. 13

    vet

    181laravel/vet · PHP

    Laravel Vet is a dependency audit for PHP: it shows you the code a composer update is about to write into your vendor/ directory and records the packages you trust in a vet.json file, so each next update only asks about what changed.

  11. 14

    audit-repo

    1571838904818/audit-repo · Python

    A Codex Skill for read-only, evidence-backed health audits of code repositories: it inventories tests, CI, dependencies, docs, security signals and technical debt, then turns verified findings into a prioritized action list. Standalone Python scripts for reproducible snapshots ship alongside it.

  12. 15

    umat-skill

    154xvchujin/umat-skill · Python

    A sanitized public set of 25 skills for OpenAI Codex, covering Abaqus UMAT/VUMAT development: constitutive mechanism routing, return mapping, tensor interfaces, state contracts, damage audits, tangent verification and hierarchical validation.

  13. 16

    GrantDecay

    128rojiloro/GrantDecay · Python

    GrantDecay is a CLI that compares what each principal was granted against what it actually used over an observation window, and reports unused permissions, narrowable roles, dormant principals, and ungranted use.

  14. 17

    NodePilot

    110Sev7eNup/NodePilot · C#

    NodePilot is an open-source, self-hosted platform for building and running Windows/PowerShell automation workflows, designed as a modern agentless replacement for Microsoft System Center Orchestrator.

Often tagged together