Security GitHub Actions

This GitHub Action runs Bridgecrew against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues.

Run a security scan on your terraform with the very nice https://github.com/aquasecurity/tfsec

A Github Action that can sync secrets from one repository to many others.

Github Action to create a .env file with Github Secrets

This project is deprecated. Use https://github.com/returntocorp/semgrep instead

A Github Action that can sync secrets from one repository to many others.

GitHub Issue + Trivy Action

Integrate SonarQube scanner to GitHub Actions

GitHub Data Loss Prevention (DLP) Action: Scan Pull Requests for sensitive data, like credentials & secrets, PII, credit card numbers, and more.

Use secrets from AWS Secrets Manager as environment variables in your GitHub Actions workflow

Github Action to unlock git-crypt secrets

🔒 GitHub Action for AWS Secrets Manager

Deprecated. Use https://github.com/SonarSource/sonarqube-scan-action instead.

Protect GitHub Actions with Tracee

Assume AWS IAM Roles using SAML.to in GitHub Actions

GitHub Action for AWS Security Group Add IP

Github action for linting AWS IAM policy documents

Transmute

Github Action to run dlint security linter on your Python code

Free Docker Vulnerability Scanning for CI/CD integration

Open source compliance tool for development platforms.

Impersonate a GitHub App in a GitHub Action

Gradle Wrapper Validation Action

Load secrets into GitHub Actions

With this preview action, you can test changes made in pull requests via Expo Go or custom development client (created with expo-dev-client) just by scanning QR code.