GitHub Advanced Security

All

95 repositories

cbom-action
Public
Create a Crypto Bill of Materials using CodeQL
Python
•
MIT License
•19•13•1•1•Updated Dec 10, 2025Dec 10, 2025
SARIF-viewer
Public
JetBrains IDE plugin for displaying SARIF from GHAS or from a local file
Kotlin
•
MIT License
•5•8•3•6•Updated Dec 10, 2025Dec 10, 2025
advanced-security-material
Public
security code-scanning codeql advanced-security advanced-security-training
Shell
•25•76•1•3•Updated Dec 10, 2025Dec 10, 2025
secret-scanning-custom-patterns
Public
Examples of Custom Secret Scanning Patterns for use with GitHub Secret Protection/Advanced Security
regex regex-patterns secret-scanning github-advanced-security
HTML
•
MIT License
•28•168•2•0•Updated Dec 10, 2025Dec 10, 2025
secret-scanning-tools
Public
Testing Suite for GitHub Secret Scanning Custom Patterns
secret-scanning github-advanced-security
Python
•
MIT License
•2•8•0•2•Updated Dec 10, 2025Dec 10, 2025
ghas-reviewer-app
Public
GitHub Advanced Security Pull Request Security Team required review GitHub App
github-app advanced-security
Python
•
MIT License
•10•36•6•0•Updated Dec 10, 2025Dec 10, 2025
codeql-summarize
Public
CodeQL Summary Generator
Python
•
MIT License
•2•7•2•0•Updated Dec 10, 2025Dec 10, 2025
ghas-to-csv
Public
Play with GHAS API to provide posture data over time
csv github-actions github-advanced-security
Python
•
MIT License
•18•40•3•0•Updated Dec 10, 2025Dec 10, 2025
enterprise-security-team
Public
Manage a uniform team of security managers for every organization in your enterprise
enterprise ghas
Python
•
MIT License
•6•25•0•0•Updated Dec 10, 2025Dec 10, 2025
secret-scanning-review-action
Public
Action to detect if a secret is initially detected in a pull request
Python
•
MIT License
•7•18•9•5•Updated Dec 10, 2025Dec 10, 2025
policy-as-code
Public
GitHub Advanced Security Policy as Code
Python
•
MIT License
•21•91•9•2•Updated Dec 10, 2025Dec 10, 2025
ghe-cross-instance-committers
Public
A script which will return the total number of unique de-deuped active committers across multiple GHES instances
ghas
TypeScript
•
MIT License
•5•6•2•1•Updated Dec 10, 2025Dec 10, 2025
secret-protection-custom-pattern-automation
Public
Automate GitHub secret protection custom patterns
secrets-detection secret-scanning advanced-security ghas secret-protection custom-patterns ghsp
TypeScript
•
MIT License
•1•6•0•0•Updated Dec 10, 2025Dec 10, 2025
codeql-dependency-graph-action
Public
CodeQL <-> Dependency Graph Actions
Python
•
MIT License
•1•0•0•0•Updated Dec 10, 2025Dec 10, 2025
crypto-bill-of-materials-data
Public
Generate a Crypto Bill of Materials using CodeQL
TypeScript
•
MIT License
•3•2•0•1•Updated Dec 10, 2025Dec 10, 2025
spdx-dependency-submission-action
Public
upload an SPDX 2.2 formatted SBOM to GitHub's dependency submission API
JavaScript
•
MIT License
•6•19•2•0•Updated Dec 10, 2025Dec 10, 2025
teams-secret-scanning-notifier-azure-function
Public
Microsoft Teams notifier for Secret Scanning alerts from GitHub Advanced Security, using a GitHub App and Azure Function
github-app security-team azure-function secret-scanning github-advanced-security microsoft-teams-bot
TypeScript
•
MIT License
•1•8•1•0•Updated Dec 10, 2025Dec 10, 2025
slack-secret-scanning-notifier-azure-function
Public
Slack notifier for Secret Scanning alerts from GitHub Advanced Security, using a GitHub App and Azure Function
slack-bot secret-scanning github-advanced-security
TypeScript
•
MIT License
•2•3•3•0•Updated Dec 10, 2025Dec 10, 2025
codeql-sap-js
Public
CodeQL models for SAP JavaScript frameworks CAP, UI5 and XSJS
TypeScript
•
MIT License
•3•6•10•7•Updated Dec 10, 2025Dec 10, 2025
github-sbom-toolkit
Public
Gather SBOMs from the GitHub Dependency Graph and report matches with packages, such as malware advisories from the GitHub Advisory Database or PURLs of your choice
malware dependency-graph dependencies supplychain purl sbom advanced-security ghas
TypeScript
•
MIT License
•3•10•0•0•Updated Dec 9, 2025Dec 9, 2025
codeql-development-template
Public template
Copilot-native repository template for CodeQL query development
CodeQL
•
MIT License
•0•3•0•0•Updated Dec 9, 2025Dec 9, 2025
component-detection-dependency-submission-action
Public
TypeScript
•
MIT License
•23•18•4•4•Updated Dec 8, 2025Dec 8, 2025
codeql-extractor-action
Public
specify a CodeQL extractor to be used in your workflows as an author of an Extractor.
Rust
•
MIT License
•0•2•1•4•Updated Dec 8, 2025Dec 8, 2025
gradle-lock-dependency-submission-action
Public
Gradle Lockfile Dependency Submission Action
Python
•
MIT License
•1•2•0•4•Updated Dec 8, 2025Dec 8, 2025
set-codeql-language-matrix
Public
Automatically set the CodeQL matrix job using the languages in your repository.
codeql
Python
•
MIT License
•10•16•4•1•Updated Dec 6, 2025Dec 6, 2025
brew-dependency-submission-action
Public
Brew Lockfile Dependency Submission Action
homebrew brew actions
Python
•
MIT License
•4•3•1•5•Updated Dec 6, 2025Dec 6, 2025
cocoapods-dependency-submission-action
Public
CocoaPods Lockfile Dependency Submission Action
Python
•
MIT License
•3•5•2•4•Updated Dec 6, 2025Dec 6, 2025
sarif-toolkit
Public
All things SARIF, as an Action
Python
•
MIT License
•3•4•4•3•Updated Dec 6, 2025Dec 6, 2025
sample-javascript-monorepo
Public
Detached fork of babel/babel to use as a TypeScript monorepo sample with 150+ packages using the monorepo-code-scanning-action https://github.com/advanced-security/monorepo-code-scanning-action
TypeScript
•
MIT License
•0•0•0•6•Updated Dec 5, 2025Dec 5, 2025
generate-sbom-action
Public
An Action to wrap creating an SBOM via REST API
TypeScript
•
MIT License
•5•20•1•12•Updated Dec 3, 2025Dec 3, 2025