cocoapods-dependency-submission-action

By advanced-security

Creator verified by GitHub

CocoaPods Lockfile Dependency Submission Action

3 stars

defectdojo active findings

By portswigger-cloud

Creator verified by GitHub

A GitHub Action that checks if there are active findings for a product in DefectDojo

Xygeni Scanner

By xygeni

Creator verified by GitHub

Runs Xygeni Scanner

4 stars

Configure Kubectl with StrongDM

By swdotcom

Creator verified by GitHub

Setup kubectl config using StrongDM CLI

15 stars

Kubernetes Security Config Watch

By sysdiglabs

Creator verified by GitHub

Run security privilege comparison against Kubernetes workloads when a PR is open

30 stars

DefenseCode ThunderScan Action

By defensecode

Creator verified by GitHub

Source code scanning for vulnerabilities using DefenseCode ThunderScan SAST solution

40 stars

brew-dependency-submission-action

By advanced-security

Creator verified by GitHub

Brew Lockfile Dependency Submission Action

2 stars

StackQL Studios - StackQL Assert

By stackql

Creator verified by GitHub

run StackQL query to test and audit your infrastructure

6 stars

SecureStack SBOM

By SecureStackCo

Creator verified by GitHub

Create a Software Bill of Materials (SBOM) with SecureStack

23 stars

listen.dev policy

By garnet-org

Creator verified by GitHub

Control the behavior of your dependencies in CI using listen.dev

2 stars

Prevasio Container Security

By algosec

Creator verified by GitHub

Extensible security plugin platform that checks Dockers for potential vulnerabilities before any commits to a repository

Rhysd actionlint

By devops-actions

Creator verified by GitHub

Check your workflows for common errors, like not declaring outputs before using them, bash script errors, and more

4 stars

Coverity json-output-v7 Report

By synopsys-sig

Creator verified by GitHub

Parse Coverity json-output-v7 and report on the results within GitHub

6 stars

Add Secure Code Warrior contextual training to SARIF

By SecureCodeWarrior

Creator verified by GitHub

Add contextual application security training to SARIF files, providing links to secure coding exercises and explainer videos

20 stars

Component Detection dependency submission action

By advanced-security

Creator verified by GitHub

Upload information about your dependencies to the GitHub dependency graph using dependency submission API.

7 stars

Chain Bench action

By aquasecurity

Creator verified by GitHub

Run software supply chain benchmark

19 stars

AWS Action - Secrets Manager

By bitovi

Creator verified by GitHub

Use secrets from AWS Secrets Manager as environment variables in your GitHub Actions workflow

11 stars

Aqua Build Security

By aquasecurity

Creator verified by GitHub

Trivy scanner with upload to to Aquasec Build Security

7 stars

DustiLock

By Checkmarx

Creator verified by GitHub

DustiLock is a tool to find which of your dependencies is susceptible to Dependency Confusion attack

31 stars

SecureStack Web Vulnerability Analysis

By SecureStackCo

Creator verified by GitHub

Scans public URL for issues like vulnerable old web components, cloud misconfigurations, missing security controls, more

20 stars