GitHub Advanced Security

All

93 repositories

SARIF-viewer
Public
JetBrains IDE plugin for displaying SARIF from GHAS or from a local file
Kotlin
•
MIT License
•4•8•3•5•Updated Oct 31, 2025Oct 31, 2025
sample-javascript-monorepo
Public
Detached fork of babel/babel to use as a TypeScript monorepo sample with 150+ packages using the monorepo-code-scanning-action https://github.com/advanced-security/monorepo-code-scanning-action
TypeScript
•
MIT License
•0•0•0•6•Updated Oct 31, 2025Oct 31, 2025
codeql-sap-js
Public
CodeQL models for SAP JavaScript frameworks CAP, UI5 and XSJS
TypeScript
•
MIT License
•3•6•7•6•Updated Oct 30, 2025Oct 30, 2025
dismiss-alerts
Public
Java
•
MIT License
•4•18•7•9•Updated Oct 30, 2025Oct 30, 2025
secret-scanning-review-action
Public
Action to detect if a secret is initially detected in a pull request
Python
•
MIT License
•7•17•8•5•Updated Oct 30, 2025Oct 30, 2025
advanced-security-material
Public
security code-scanning codeql advanced-security advanced-security-training
Shell
•25•75•1•3•Updated Oct 29, 2025Oct 29, 2025
secret-scanning-notifications
Public
A GitHub Action that sends email notifications to security manager team for any new or resolved secret scanning alerts based on a set frequency
TypeScript
•
MIT License
•3•1•0•10•Updated Oct 29, 2025Oct 29, 2025
slack-secret-scanning-notifier-azure-function
Public
Slack notifier for Secret Scanning alerts from GitHub Advanced Security, using a GitHub App and Azure Function
slack-bot secret-scanning github-advanced-security
TypeScript
•
MIT License
•2•3•3•0•Updated Oct 28, 2025Oct 28, 2025
teams-secret-scanning-notifier-azure-function
Public
Microsoft Teams notifier for Secret Scanning alerts from GitHub Advanced Security, using a GitHub App and Azure Function
github-app security-team azure-function secret-scanning github-advanced-security microsoft-teams-bot
TypeScript
•
MIT License
•1•7•1•0•Updated Oct 28, 2025Oct 28, 2025
ghas-to-csv
Public
Play with GHAS API to provide posture data over time
csv github-actions github-advanced-security
Python
•
MIT License
•18•39•1•7•Updated Oct 28, 2025Oct 28, 2025
github-sbom-toolkit
Public
Gather SBOMs from the GitHub Dependency Graph and report matches with packages, such as malware advisories from the GitHub Advisory Database or PURLs of your choice
malware dependency-graph dependencies supplychain purl sbom advanced-security ghas
TypeScript
•
MIT License
•0•3•0•2•Updated Oct 27, 2025Oct 27, 2025
spdx-dependency-submission-action
Public
upload an SPDX 2.2 formatted SBOM to GitHub's dependency submission API
JavaScript
•
MIT License
•6•18•2•3•Updated Oct 27, 2025Oct 27, 2025
component-detection-dependency-submission-action
Public
TypeScript
•
MIT License
•15•18•5•5•Updated Oct 27, 2025Oct 27, 2025
reusable-workflows
Public
Advanced Security Reusable GitHub Actions Workflows
MIT License
•5•3•4•4•Updated Oct 27, 2025Oct 27, 2025
codeql-sarif-security-standard-annotator
Public
Compare a CodeQL SARIF results file to a security standard CWE list and annotate the SARIF rules with a tag to highlight results applicable to the security standard
TypeScript
•
MIT License
•1•10•1•11•Updated Oct 27, 2025Oct 27, 2025
conda-dependency-submission-action
Public
GitHub Action that scans Conda manifest files and submits their dependencies to GitHub's Dependency Graph,
dependency-graph conda dependabot dependency-graph-api
TypeScript
•
MIT License
•3•0•0•8•Updated Oct 27, 2025Oct 27, 2025
codeql-extractor-iac
Public
CodeQL Extractor, Library, and Queries for Infrastructure as Code
CodeQL
•
MIT License
•10•55•15•6•Updated Oct 27, 2025Oct 27, 2025
ghas-reviewer-app
Public
GitHub Advanced Security Pull Request Security Team required review GitHub App
github-app advanced-security
Python
•
MIT License
•10•36•5•5•Updated Oct 27, 2025Oct 27, 2025
generate-sbom-action
Public
An Action to wrap creating an SBOM via REST API
TypeScript
•
MIT License
•5•20•1•11•Updated Oct 24, 2025Oct 24, 2025
secret-protection-custom-pattern-automation
Public
Automate GitHub secret protection custom patterns
secrets-detection secret-scanning advanced-security ghas secret-protection custom-patterns ghsp
TypeScript
•
MIT License
•1•5•0•1•Updated Oct 20, 2025Oct 20, 2025
codeql-scanner-vscode
Public
CodeQL Plugin for VSCode to help scan and view alerts in code
TypeScript
•
MIT License
•2•5•1•7•Updated Oct 20, 2025Oct 20, 2025
codeql-extractor-action
Public
specify a CodeQL extractor to be used in your workflows as an author of an Extractor.
Rust
•
MIT License
•0•2•1•2•Updated Oct 20, 2025Oct 20, 2025
enterprise-security-team
Public
Manage a uniform team of security managers for every organization in your enterprise
enterprise ghas
Python
•
MIT License
•6•25•0•1•Updated Oct 17, 2025Oct 17, 2025
codeql-summarize
Public
CodeQL Summary Generator
Python
•
MIT License
•2•7•2•3•Updated Oct 13, 2025Oct 13, 2025
cocoapods-dependency-submission-action
Public
CocoaPods Lockfile Dependency Submission Action
Python
•
MIT License
•3•5•2•3•Updated Oct 13, 2025Oct 13, 2025
brew-dependency-submission-action
Public
Brew Lockfile Dependency Submission Action
homebrew brew actions
Python
•
MIT License
•4•3•1•4•Updated Oct 13, 2025Oct 13, 2025
gradle-lock-dependency-submission-action
Public
Gradle Lockfile Dependency Submission Action
Python
•
MIT License
•1•2•0•3•Updated Oct 13, 2025Oct 13, 2025
secret-scanning-tools
Public
Testing Suite for GitHub Secret Scanning Custom Patterns
secret-scanning github-advanced-security
Python
•
MIT License
•2•8•0•4•Updated Oct 13, 2025Oct 13, 2025
policy-as-code
Public
GitHub Advanced Security Policy as Code
Python
•
MIT License
•21•90•8•3•Updated Oct 13, 2025Oct 13, 2025
ghas-license-utilization
Public
Optimize the utilization of GHAS licenses in an enterprise (or organization)
advanced-security ghas
Python
•
MIT License
•3•15•1•2•Updated Oct 8, 2025Oct 8, 2025