Security

WhiteSource Bolt

Detect open source vulnerabilities in real time with suggested fixes for quick remediation

Renovate

Keep dependencies up-to-date with automated Pull Requests

OWASP ZAP Full Scan

By zaproxy

Scans the web application with the OWASP ZAP Full Scan

Snyk

By snyk

Check your Node application for vulnerabilties using Snyk

Synopsys Detect

By blackducksoftware

Add SAST and SCA scanning to your GitHub repositories with Synopsys Coverity on Polaris and Black Duck

BackHub

Reliable GitHub repository backup, set up in minutes

Dependabot Preview

Automated dependency updates for Ruby, JavaScript, Python, Go, PHP, Elixir, Rust, Java and .NET

Snyk

Find, fix (and prevent!) known vulnerabilities in your code

Anchore Container Scan

By anchore

Scan docker containers with Anchore for vulnerabilities and policy violations

GuardRails

GuardRails provides continuous security feedback for modern development teams

OWASP ZAP Baseline Scan

By zaproxy

Scans the web application with the OWASP ZAP Baseline Scan

Sonatype DepShield

Monitor your open source components for security vulnerabilities - goodbye muda, hello kaizen

GP Security Scan

By whitesource

Scan packages and Docker images uploaded to GitHub Packages

DevSkim

By microsoft

Run DevSkim Code Analysis

LGTM

Find and prevent zero-days and other critical bugs, with customizable alerts and automated code review

Secrets Sync Action

By google

Copies secrets from the action's environment to many other repos

SonarCloud Scan

By SonarSource

Scan your code with SonarCloud to detect bugs, vulnerabilities and code smells in more than 25 programming languages

AppInspector

By microsoft

Run ApplicationInspector Static Analysis

Docker Vulnerability Scan With Phonito Security

By phonito

Scan Docker image for security vulnerabilities

Check Critical Files

By CodelyTV

Check for critical files in your commits and warns you