Security

Cloudback Backup

By Cloudback

Backups your GitHub repositories, fast and secure

Debricked

By Debricked

Automatically identify, fix and prevent vulnerabilities in your open source dependencies

Muse-Dev

By MuseDev

Muse helps you find and fix your most elusive bugs so you can spend time writing great code, not debugging it

42Crunch REST API Static Security Testing

By 42Crunch

The REST API Static Security Testing action adds an automatic static application security testing (SAST) to your workflows

Checkmarx Scan

By checkmarx-ts

Find vulnerabilities in your code using Checkmarx SAST solution

BackHub

By BackHub

Reliable GitHub repository backup, set up in minutes

Generate SARIF from Fortify on Demand

By fortify

Generate SARIF file from Fortify on Demand SAST results for import to GitHub

Aqua Security Trivy

By aquasecurity

Scans container images for vulnerabilities with Trivy

Renovate

By Renovate Bot

Keep dependencies up-to-date with automated Pull Requests

SonarCloud Scan

By SonarSource

Scan your code with SonarCloud to detect bugs, vulnerabilities and code smells in more than 25 programming languages.

Nightfall DLP Action

By nightfallai

Scan Pull Requests for sensitive information, like credentials & secrets, PII, credit card numbers, and more

Snyk

By Snyk

Find, fix (and prevent!) known vulnerabilities in your code

GuardRails

By GuardRails

GuardRails provides continuous security feedback for modern development teams

Vault Secrets

By hashicorp

A Github Action that allows you to consume HashiCorp Vault™ secrets as secure environment variables

GP Security Scan

By whitesource

Scan packages and Docker images uploaded to GitHub Packages

Secrets Sync Action

By google

Copies secrets from the action's environment to many other repos

Veracode Upload And Scan

By veracode

Upload files to veracode and start a static scan

Fortify ScanCentral Scan

By fortify

Build secure software fast with Fortify SAST scans

DefenseCode ThunderScan Action

By defensecode

Source code scanning for vulnerabilities using DefenseCode ThunderScan SAST solution

Veracode Static Analysis Pipeline Scan and SARIF import

By veracode

Initiate a Veracode Static Analysis Pipeline Scan and convert the results file to a valid SARIF file