Security

Anchore Container Scan

By anchore

Scan docker containers with Grype for vulnerabilities

Vault Secrets

By hashicorp

A Github Action that allows you to consume HashiCorp Vault™ secrets as secure environment variables

WhiteSource Bolt

By WhiteSource

Detect open source vulnerabilities in real time with suggested fixes for quick remediation

Synopsys Intelligent Security Scan

By synopsys-sig

Initiate optimized SAST/SCA scans based on code changes and policy with filtered results for display in GitHub

Veracode Upload And Scan

By veracode

Upload files to veracode and start a static scan

GuardRails

By GuardRails

GuardRails provides continuous security feedback for modern development teams

Aqua Security Trivy

By aquasecurity

Scans container images for vulnerabilities with Trivy

BackHub

By BackHub

Reliable GitHub repository backup, set up in minutes

Generate SARIF from Fortify on Demand

By fortify

Generate SARIF file from Fortify on Demand SAST results for import to GitHub

42Crunch REST API Static Security Testing

By 42Crunch

The REST API Static Security Testing action adds an automatic static application security testing (SAST) to your workflows

Datadog Vulnerability Analysis with Snyk

By DataDog

Compute the dependency graph and upload it to Datadog

Add Secure Code Warrior contextual training to SARIF

By SecureCodeWarrior

Add contextual application security training to SARIF files, providing links to secure coding exercises and explainer videos

Nightfall DLP Action

By nightfallai

Scan Pull Requests for sensitive information, like credentials & secrets, PII, credit card numbers, and more

Secrets Sync Action

By google

Copies secrets from the action's environment to many other repos

SonarCloud Scan

By SonarSource

Scan your code with SonarCloud to detect bugs, vulnerabilities and code smells in more than 25 programming languages.

Snyk

By snyk

Check your applications for vulnerabilties using Snyk

Renovate

By Renovate Bot

Keep dependencies up-to-date with automated Pull Requests

Refactr - Run Pipeline

By refactr

Runs a pipeline in the Refactr Platform

Dependabot Preview

By GitHub

Automated dependency updates for Ruby, JavaScript, Python, Go, PHP, Elixir, Rust, Java and .NET

DefenseCode ThunderScan Action

By defensecode

Source code scanning for vulnerabilities using DefenseCode ThunderScan SAST solution