Security GitHub Actions

Install 1Password CLI into your GitHub Actions jobs.

Protect your secrets using Gitleaks-Action

One secret mapping for local dev, CI/CD, and runtime. Envilder resolves cloud secrets from your own vaults without SaaS middlemen, duplicated config, or .env drift.

A GitHub Action for accessing secrets from Google Secret Manager and making them available as outputs.

AI code quality toolkit — deterministic linter for the AI coding era. 22 detectors, GitHub Action PR gate, zero LLM required.

A GitHub Action for running the ZAP Baseline scan

A GitHub Action for running the ZAP Full scan

AI Bill of Materials — discover every AI agent, model, and API in your infrastructure

AI-powered SAST scanner that finds auth bypass, IDOR, and logic bugs Semgrep/CodeQL miss. Free GitHub Action. Supports Python, JS/TS, Go, PHP, Ruby.

Publish from GitHub Actions using multi-factor authentication

A GitHub Action for running the ZAP API scan

A GitHub Action for authenticating to Google Cloud.

❌ GitHub Action for cargo-deny 🦀

Github Action for integrating Security Alerts with JIRA

GitHub action to enable cloning private respositories.

Github Action implementation of SLSA Provenance Generation

SonarQube Scan CLI + GitHub Action without a need of a dedicated hosted SonarQube Server

GitHub Action to import a GPG key

GitHub Action to upload and scan files with VirusTotal

GitHub Action and CLI to validate, monitor, and publish verifiable skills (SKILL.md) via Registry Broker

A GitHub Action that configure authentication to a GKE cluster.

🔍 Universal Lock File Scanner for Git. (Lock + Scan = LoXcan!)

Trust scoring for GitHub PR authors based on contribution history.

A GitHub Action for pip-audit

Git Anti-Virus Scan Action - Detect trojans, viruses, malware & other malicious threats.

Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alerts

GitHub Action for license compliance: Python, JavaScript, iOS, Android and more.

Helps you continuously monitor and fix common security vulnerabilities in your Django application.

This GitHub Action runs Bridgecrew against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues.

GitHub Action to scan your site for broken links so you can fix them 🔗

A Github Action that can sync secrets from one repository to many others.

This project is deprecated. Use https://github.com/returntocorp/semgrep instead

Github Action to create a .env file with Github Secrets

A Github Action that can sync secrets from one repository to many others.

GitHub Issue + Trivy Action

GitHub Data Loss Prevention (DLP) Action: Scan Pull Requests for sensitive data, like credentials & secrets, PII, credit card numbers, and more.

Run a security scan on your terraform with the very nice https://github.com/aquasecurity/tfsec

Use secrets from AWS Secrets Manager as environment variables in your GitHub Actions workflow

Github Action to unlock git-crypt secrets

Integrate SonarQube scanner to GitHub Actions

🔒 GitHub Action for AWS Secrets Manager

Deprecated. Use https://github.com/SonarSource/sonarqube-scan-action instead.

Assume AWS IAM Roles using SAML.to in GitHub Actions

Protect GitHub Actions with Tracee

GitHub Action for AWS Security Group Add IP

Github action for linting AWS IAM policy documents

Transmute

Github Action to run dlint security linter on your Python code

Free Docker Vulnerability Scanning for CI/CD integration

Open source compliance tool for development platforms.