UPDATE

v2026.7.3 is out:

## What's Changed
* Fix: AI-only analysis now writes a report instead of pointing to nonexistent files by @advaitpatel in https://github.com/OWASP/DockSec/pull/134
* Fix LLM-init crash, modernize HTML report, and expand comparison table by @advaitpatel in https://github.com/OWASP/DockSec/pull/137
* Add SBOM export, offline mode, install-skill, and fix-command output by @advaitpatel in https://github.com/OWASP/DockSec/pull/138

**Full Changelog**: https://github.com/OWASP/DockSec/compare/v2026.7.2...v2026.7.3

Full release notes: github.com/OWASP/DockSec/releases/tag/v2026.7.3

Wazuh is an open-source security platform that delivers combined XDR and SIEM functionality to safeguard endpoints and cloud workloads.

Bruno is an open-source API client for exploring and testing APIs - a privacy-focused alternative to Postman and Insomnia that stores collections directly as files on disk.

UPDATE

Opengrep v1.25.0 is out with several Dart translation fixes and a PHP lexer fix.

Kali Linux is the most widely used penetration testing distribution, maintained by Offensive Security and packed with hundreds of security and forensics tools out of the box.

DockSec is an OWASP Lab Project that bridges the gap between complex Docker security scan results and actionable fixes.

Bruno is an open-source API client for exploring and testing APIs - a privacy-focused alternative to Postman and Insomnia that stores collections directly as files on disk. Version v3.5.0 brings multi-file uploads, improved OpenAPI support, npm package management, and a wave of bug fixes.

Flameshot is an open-source screenshot utility with built-in annotation, highlighting, and sharing capabilities - available for Linux, Windows, and macOS. Version v14.0.0 is out and brings significant changes to multi-monitor support, Wayland compatibility, and a long list of bug fixes.

Opengrep is an open-source static code analysis (SAST) engine - a community-driven alternative to Semgrep, born after Semgrep moved critical scanning features behind a commercial license. It supports inter-procedural and cross-file analysis, SARIF/JSON output, and is backed by a consortium of 10+ appsec organizations. Version v1.23.0 is out with Crystal language support and several bug fixes.