Security GitHub Actions

GitHub Action to upload and scan files with VirusTotal

A GitHub Action for accessing secrets from Google Secret Manager and making them available as outputs.

Publish from GitHub Actions using multi-factor authentication

GitHub Action for creating a GitHub App Installation Access Token

A GitHub Action for running the ZAP Full scan

AI code quality toolkit — deterministic linter for the AI coding era. 22 detectors, GitHub Action PR gate, zero LLM required.

A GitHub Action for running the ZAP Baseline scan

AI Bill of Materials — discover every AI agent, model, and API in your infrastructure

AI-powered SAST scanner that finds auth bypass, IDOR, and logic bugs Semgrep/CodeQL miss. Free GitHub Action. Supports Python, JS/TS, Go, PHP, Ruby.

A GitHub Action for running the ZAP API scan

SonarQube Scan CLI + GitHub Action without a need of a dedicated hosted SonarQube Server

🐚 GitHub Action for running ShellCheck differentially

Github Action for integrating Security Alerts with JIRA

Github Action implementation of SLSA Provenance Generation

GitHub action to enable cloning private respositories.

GitHub Action and CLI to validate, monitor, and publish verifiable skills (SKILL.md) via Registry Broker

Git Anti-Virus Scan Action - Detect trojans, viruses, malware & other malicious threats.

🔍 Universal Lock File Scanner for Git. (Lock + Scan = LoXcan!)

A GitHub Action for pip-audit

A GitHub Action that configure authentication to a GKE cluster.

Trust scoring for GitHub PR authors based on contribution history.

GitHub Actions CI/CD - Master Template & Reusable Workflows Library - Docker Builds, AWS, Python, Terraform, Jenkins, Linting, Security Scanning, Make Builds etc.

Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alerts

GitHub Action to scan your site for broken links so you can fix them 🔗

Helps you continuously monitor and fix common security vulnerabilities in your Django application.

GitHub Action for license compliance: Python, JavaScript, iOS, Android and more.

This GitHub Action runs Bridgecrew against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues.

A Github Action that can sync secrets from one repository to many others.

Github Action to create a .env file with Github Secrets

This project is deprecated. Use https://github.com/returntocorp/semgrep instead

A Github Action that can sync secrets from one repository to many others.

Run a security scan on your terraform with the very nice https://github.com/aquasecurity/tfsec

GitHub Issue + Trivy Action

Integrate SonarQube scanner to GitHub Actions

GitHub Data Loss Prevention (DLP) Action: Scan Pull Requests for sensitive data, like credentials & secrets, PII, credit card numbers, and more.

Use secrets from AWS Secrets Manager as environment variables in your GitHub Actions workflow

Github Action to unlock git-crypt secrets

Deprecated. Use https://github.com/SonarSource/sonarqube-scan-action instead.

🔒 GitHub Action for AWS Secrets Manager

Protect GitHub Actions with Tracee

Assume AWS IAM Roles using SAML.to in GitHub Actions

GitHub Action for AWS Security Group Add IP

Transmute

Github action for linting AWS IAM policy documents

Github Action to run dlint security linter on your Python code

Free Docker Vulnerability Scanning for CI/CD integration

Open source compliance tool for development platforms.

Gradle Wrapper Validation Action

Impersonate a GitHub App in a GitHub Action

Load secrets into GitHub Actions