Actions

Psalm – Security Scanner for PHP

By psalm

Find security vulnerabilities in your PHP codebase with Psalm, a free and open-source tool created by Vimeo

14 stars

CodeGuru Reviewer

By aws-actions

AWS CodeGuru Reviewer Action

18 stars

Export Fortify vulnerability data

By fortify

Export Fortify vulnerability data to various targets

SonarCloud Scan

By SonarSource

Scan your code with SonarCloud to detect bugs, vulnerabilities and code smells in more than 25 programming languages.

322 stars

GP Security Scan

By whitesource

Scan packages and Docker images uploaded to GitHub Packages

53 stars

Gradle Wrapper Validation

By gradle

Validates Gradle Wrapper JAR Files

131 stars

Snyk

By snyk

Check your applications for vulnerabilties using Snyk

148 stars

Kubernetes Security Config Watch

By sysdiglabs

Run security privilege comparison against Kubernetes workloads when a PR is open

19 stars

Sysdig CIS Dockerfile Benchmark

By sysdiglabs

Run CIS Dockerfile benchmark against dockerfiles in repository (CIS 4.1, 4.2, 4.3, 4.6, 4.7, 4.9, 4.10)

8 stars

Secrets Sync Action

By google

Copies secrets from the action's environment to many other repos

195 stars

Bridgecrew Github Action

By bridgecrewio

Find and fix security and compliance issues in infrastructure code using Bridgecrew Action

35 stars

Fortify ScanCentral Scan

By fortify

Build secure software fast with Fortify SAST scans

12 stars

Fortify on Demand Scan

By fortify

Build secure software fast with Fortify SAST scans

10 stars

Generate SARIF from Fortify on Demand

By fortify

Generate SARIF file from Fortify on Demand SAST results for import to GitHub

2 stars

Veracode Static Analysis Pipeline Scan and SARIF import

By veracode

Initiate a Veracode Static Analysis Pipeline Scan and convert the results file to a valid SARIF file

7 stars

Xanitizer Security Analysis

By RIGS-IT

GitHub action to download and install Xanitizer, and to run a Xanitizer security analysis in a GitHub workflow

5 stars

Add Secure Code Warrior contextual training to SARIF

By SecureCodeWarrior

Add contextual application security training to SARIF files, providing links to secure coding exercises and explainer videos

12 stars

DefenseCode ThunderScan Action

By defensecode

Source code scanning for vulnerabilities using DefenseCode ThunderScan SAST solution

28 stars

SonarQube Quality Gate Check

By SonarSource

Check if a project / analysis passed the Quality Gate check

8 stars

Aqua Security Tracee

By aquasecurity

Start Runtime Security and Forensics using eBPF

12 stars