Security GitHub Actions

GitHub Action for creating a GitHub App Installation Access Token

A GitHub Action for running the ZAP Full scan

Publish from GitHub Actions using multi-factor authentication

GitHub Action to check for vulnerabilities in your container image

AI code quality toolkit — deterministic linter for the AI coding era. 22 detectors, GitHub Action PR gate, zero LLM required.

A GitHub Action for running the ZAP Baseline scan

AI-powered SAST scanner that finds auth bypass, IDOR, and logic bugs Semgrep/CodeQL miss. Free GitHub Action. Supports Python, JS/TS, Go, PHP, Ruby.

AI Bill of Materials — discover every AI agent, model, and API in your infrastructure

A GitHub Action for running the ZAP API scan

SonarQube Scan CLI + GitHub Action without a need of a dedicated hosted SonarQube Server

Github Action for integrating Security Alerts with JIRA

Github Action implementation of SLSA Provenance Generation

GitHub Action to upload and scan files with VirusTotal

GitHub Action to import a GPG key

GitHub Action and CLI to validate, monitor, and publish verifiable skills (SKILL.md) via Registry Broker

Git Anti-Virus Scan Action - Detect trojans, viruses, malware & other malicious threats.

🔍 Universal Lock File Scanner for Git. (Lock + Scan = LoXcan!)

A GitHub Action that configure authentication to a GKE cluster.

GitHub action to enable cloning private respositories.

Trust scoring for GitHub PR authors based on contribution history.

A GitHub Action for pip-audit

GitHub Actions CI/CD - Master Template & Reusable Workflows Library - Docker Builds, AWS, Python, Terraform, Jenkins, Linting, Security Scanning, Make Builds etc.

Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alerts

GitHub Action for license compliance: Python, JavaScript, iOS, Android and more.

GitHub Action to scan your site for broken links so you can fix them 🔗

This GitHub Action runs Bridgecrew against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues.

Helps you continuously monitor and fix common security vulnerabilities in your Django application.

Github Action to create a .env file with Github Secrets

A Github Action that can sync secrets from one repository to many others.

Run a security scan on your terraform with the very nice https://github.com/aquasecurity/tfsec

This project is deprecated. Use https://github.com/returntocorp/semgrep instead

A Github Action that can sync secrets from one repository to many others.

GitHub Issue + Trivy Action

GitHub Data Loss Prevention (DLP) Action: Scan Pull Requests for sensitive data, like credentials & secrets, PII, credit card numbers, and more.

Integrate SonarQube scanner to GitHub Actions

Use secrets from AWS Secrets Manager as environment variables in your GitHub Actions workflow

Github Action to unlock git-crypt secrets

🔒 GitHub Action for AWS Secrets Manager

Deprecated. Use https://github.com/SonarSource/sonarqube-scan-action instead.

Protect GitHub Actions with Tracee

Assume AWS IAM Roles using SAML.to in GitHub Actions

GitHub Action for AWS Security Group Add IP

Transmute

Github action for linting AWS IAM policy documents

Github Action to run dlint security linter on your Python code

Free Docker Vulnerability Scanning for CI/CD integration

Open source compliance tool for development platforms.

Gradle Wrapper Validation Action

Impersonate a GitHub App in a GitHub Action

Load secrets into GitHub Actions