Security GitHub Actions

This GitHub Action runs Bridgecrew against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues.

A Github Action that can sync secrets from one repository to many others.

A Github Action that can sync secrets from one repository to many others.

This project is deprecated. Use https://github.com/returntocorp/semgrep instead

Github Action to create a .env file with Github Secrets

Integrate SonarQube scanner to GitHub Actions

GitHub Data Loss Prevention (DLP) Action: Scan Pull Requests for sensitive data, like credentials & secrets, PII, credit card numbers, and more.

GitHub Issue + Trivy Action

Github Action to unlock git-crypt secrets

Protect GitHub Actions with Tracee

Deprecated. Use https://github.com/SonarSource/sonarqube-scan-action instead.

Github Action to run dlint security linter on your Python code

Free Docker Vulnerability Scanning for CI/CD integration

Open source compliance tool for development platforms.

Gradle Wrapper Validation Action

With this preview action, you can test changes made in pull requests via Expo Go or custom development client (created with expo-dev-client) just by scanning QR code.

Load secrets into GitHub Actions