Security

Secrets Sync Action

By google

Copies secrets from the action's environment to many other repos

42Crunch REST API Static Security Testing

By 42Crunch

The REST API Static Security Testing action adds an automatic static application security testing (SAST) to your workflows

SonarCloud Scan

By SonarSource

Scan your code with SonarCloud to detect bugs, vulnerabilities and code smells in more than 25 programming languages.

Veracode Upload And Scan

By veracode

Upload files to veracode and start a static scan

Fortify ScanCentral Scan

By fortify

Build secure software fast with Fortify SAST scans

Nightfall DLP Action

By nightfallai

Scan Pull Requests for sensitive information, like credentials & secrets, PII, credit card numbers, and more

Anchore Container Scan

By anchore

Scan docker containers with Grype for vulnerabilities

Add Secure Code Warrior contextual training to SARIF

By SecureCodeWarrior

Add contextual application security training to SARIF files, providing links to secure coding exercises and explainer videos

Xanitizer Security Analysis

By RIGS-IT

GitHub action to download and install Xanitizer, and to run a Xanitizer security analysis in a GitHub workflow

GuardRails

By GuardRails

GuardRails provides continuous security feedback for modern development teams

Snyk

By Snyk

Find, fix (and prevent!) known vulnerabilities in your code

LGTM

By Semmle

Find and prevent zero-days and other critical bugs, with customizable alerts and automated code review

OWASP ZAP Full Scan

By zaproxy

Scans the web application with the OWASP ZAP Full Scan

Checkmarx CxFlow Action

By checkmarx-ts

Simplify Checkmarx Scanning of source code along with Result consumption leveraging Checkmarx CxFlow solution

Snyk

By snyk

Check your applications for vulnerabilties using Snyk

Renovate

By Renovate Bot

Keep dependencies up-to-date with automated Pull Requests

Fortify on Demand Scan

By fortify

Build secure software fast with Fortify SAST scans

BackHub

By BackHub

Reliable GitHub repository backup, set up in minutes

Synopsys Intelligent Security Scan

By synopsys-sig

Initiate optimized SAST/SCA scans based on code changes and policy with filtered results for display in GitHub

Veracode Static Analysis Pipeline Scan and SARIF import

By veracode

Initiate a Veracode Static Analysis Pipeline Scan and convert the results file to a valid SARIF file