Security

BackHub Backups by Rewind

By backhub

Backup your GitHub repos and metadata automatically. Get daily backups that can be restored in seconds – AWS storage available

Recommended

GuardRails

By guardrailsio

GuardRails provides continuous security feedback for modern development teams

2k installs

Semgrep

By returntocorp

Code scanning at ludicrous speed. Find bugs, apply guardrails across your repos, and get feedback in PRs, Slack, or email

1.7k installs

GitProtect.io Backup

By xoperosoftware

Automatic, daily repo and metadata backup - no maintenance needed: fast restore, DR, AWS, and S3 cloud storage support

1.1k installs

Cloudback Backup

By cloudback

Backups your GitHub repositories, fast and secure

348 installs

Debricked

By debricked

Automatically identify, fix and prevent vulnerabilities in your open source dependencies

818 installs

Nightfall DLP: GitHub Secrets Scanner

By nightfallai

Nightfall automatically detects PII, credentials, secrets, and more in GitHub repos via machine learning. Free tier

437 installs

Scantist SCA

By scantist

Proactive vulnerability management and license compliance for your third-party components

473 installs

NeuraLegion

By NeuraLegion

NeuraLegion is a powerful dynamic App and API security testing (DAST) platform that security teams trust and developers love

331 installs

GitGuardian

By GitGuardian

GitGuardian provides real time secrets detection and security policies enforcement across all your repositories

140k installs

Psalm – Security Scanner for PHP

By psalm

Find security vulnerabilities in your PHP codebase with Psalm, a free and open-source tool created by Vimeo

14 stars

CodeGuru Reviewer

By aws-actions

AWS CodeGuru Reviewer Action

18 stars

Export Fortify vulnerability data

By fortify

Export Fortify vulnerability data to various targets

SonarCloud Scan

By SonarSource

Scan your code with SonarCloud to detect bugs, vulnerabilities and code smells in more than 25 programming languages.

322 stars

GP Security Scan

By whitesource

Scan packages and Docker images uploaded to GitHub Packages

53 stars

Gradle Wrapper Validation

By gradle

Validates Gradle Wrapper JAR Files

131 stars

Snyk

By snyk

Check your applications for vulnerabilties using Snyk

148 stars

Sysdig Secure Inline Scan

By sysdiglabs

Perform image analysis on locally built container image and post the result of the analysis to Sysdig Secure

18 stars

Kubernetes Security Config Watch

By sysdiglabs

Run security privilege comparison against Kubernetes workloads when a PR is open

19 stars

Sysdig CIS Dockerfile Benchmark

By sysdiglabs

Run CIS Dockerfile benchmark against dockerfiles in repository (CIS 4.1, 4.2, 4.3, 4.6, 4.7, 4.9, 4.10)

8 stars