Security

Dependabot Preview

Automated dependency updates for Ruby, JavaScript, Python, Go, PHP, Elixir, Rust, Java and .NET

Synopsys Detect

By blackducksoftware

Add SAST and SCA scanning to your GitHub repositories with Synopsys Coverity on Polaris and Black Duck

WhiteSource Bolt

Detect open source vulnerabilities in real time with suggested fixes for quick remediation

Snyk

By snyk

Check your Node application for vulnerabilties using Snyk

OWASP ZAP Baseline Scan

By zaproxy

Scans the web application with the OWASP ZAP Baseline Scan

LGTM

Find and prevent zero-days and other critical bugs, with customizable alerts and automated code review

BackHub

Reliable GitHub repository backup, set up in minutes

Snyk

Find, fix (and prevent!) known vulnerabilities in your code

Renovate

Keep dependencies up-to-date with automated Pull Requests

GP Security Scan

By whitesource

Scan packages and Docker images uploaded to GitHub Packages

SonarCloud Scan

By SonarSource

Scan your code with SonarCloud to detect bugs, vulnerabilities and code smells in more than 25 programming languages

Secrets Sync Action

By google

Copies secrets from the action's environment to many other repos

GuardRails

GuardRails provides continuous security feedback for modern development teams

OWASP ZAP Full Scan

By zaproxy

Scans the web application with the OWASP ZAP Full Scan

Sonatype DepShield

Monitor your open source components for security vulnerabilities - goodbye muda, hello kaizen

AppInspector

By microsoft

Run ApplicationInspector Static Analysis

DevSkim

By microsoft

Run DevSkim Code Analysis

Verify commit

By vchain-us

Verify the authenticity of your commits with CodeNotary.io

Trivy Action

By homoluctus

Scan docker image vulnerability using Trivy and create GitHub Issue

Checkmarx Scan

By checkmarx-ts

Find vulnerabilities in your code using Checkmarx SAST solution