An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

github actions "security" keyword

luckyPipewrench/pipelock v3.5.0 💰
Scan your project for AI agent security risks. Pattern-based detection of credentials and misconf...
55 versions - Latest release: 12 days ago - 835 stars on GitHub
DopplerHQ/secrets-fetch-action v2.0.0
Fetch Doppler secrets for a specific Project and Config
9 versions - Latest release: 6 months ago - 28 stars on GitHub
google/clusterfuzzlite/actions/build_fuzzers v1
Builds project's fuzzers.
1 version - Latest release: over 4 years ago - 531 stars on GitHub
google/clusterfuzzlite/actions/run_fuzzers v1
Runs fuzz target binaries.
1 version - Latest release: over 4 years ago - 531 stars on GitHub
suzuki-shunsuke/github-action-tfsec v1.0.0 💰
tfsec action
12 versions - Latest release: almost 3 years ago - 2 dependent repositories - 2 stars on GitHub
Top 9.5% on github actions
erzz/dockle-action v1.4.1
Lint & Best Practices for container images with integrations to Github UI
10 versions - Latest release: 5 months ago - 88 dependent repositories - 15 stars on GitHub
lfreleng-actions/sonarqube-cloud-scan-action v1.4.0
Performs a SonarQube Cloud scan and uploads the results
14 versions - Latest release: about 2 months ago - 0 stars on GitHub
kitabisa/gokart-action v1.0.0
Scan your code with GoKart to finds vulnerabilities using the SSA (single static assignment) form...
1 version - Latest release: about 5 years ago - 1 dependent repositories - 9 stars on GitHub
open-nudge/opentemplate/.github/actions/pdm-setup v0.1.5
Setup PDM and install dev dependencies for opentemplate.
6 versions - Latest release: about 1 year ago - 42 stars on GitHub
open-nudge/opentemplate/.github/actions/pull-request v0.1.5
Make a pull request from the current branch
6 versions - Latest release: about 1 year ago - 42 stars on GitHub
open-nudge/opentemplate/.github/actions/pdm-compatibility v0.1.5
Compatibility bridge between local PDM and GitHub Actions.
6 versions - Latest release: about 1 year ago - 42 stars on GitHub
Top 1.5% on github actions
MobSF/mobsfscan 1.0.0 💰
mobsfscan is a SAST that can find insecure code patterns in your Android and iOS source code.
31 versions - Latest release: about 1 month ago - 96 dependent repositories - 783 stars on GitHub
geritol/write-guard v0.4.0
Enforce file level write access for monorepos
6 versions - Latest release: over 4 years ago - 1 dependent repositories - 9 stars on GitHub
actions-rust-lang/audit v1.2.7
Audit Rust dependencies with cargo audit and the RustSec Advisory DB
29 versions - Latest release: 8 months ago - 26 dependent repositories - 18 stars on GitHub
NeuraLegion/stop-scan v1.1
Stops a Bright Scan
2 versions - Latest release: over 1 year ago - 0 stars on GitHub
Top 8.5% on github actions
accurics/accurics-action v2.0.3
The Accurics GitHub Action scans IaC (Infrastructure as Code) to help identify vulnerabilities pr...
44 versions - Latest release: almost 4 years ago - 3 dependent repositories - 16 stars on GitHub
Top 4.6% on github actions
sigstore/gh-action-sigstore-python v3.5.0
Use sigstore-python to sign Python packages
33 versions - Latest release: about 2 months ago - 143 dependent repositories - 71 stars on GitHub
Top 4.7% on github actions
pyupio/safety 3.12.13 💰
Runs the Safety CLI dependency scanner against your project
121 versions - Latest release: almost 2 years ago - 3 dependent repositories - 1,996 stars on GitHub
jhutchings1/spdx-to-dependency-graph-action v0.0.2
Upload SPDX SBOM files to the dependency graph's dependency submission API
2 versions - Latest release: almost 4 years ago - 6 dependent repositories - 10 stars on GitHub
Top 9.4% on github actions
advanced-security/codeql-bundle-action v2.2.0 removed
Action to build custom CodeQL bundles
9 versions - Latest release: over 2 years ago - 2 dependent repositories - 27 stars on GitHub
Top 0.8% on github actions
oxsecurity/megalinter v10.1.0 💰
Combine all available linters to automatically validate your sources without configuration !
183 versions - Latest release: 8 days ago - 224 dependent repositories - 2,584 stars on GitHub
Top 0.6% on github actions
gradle/wrapper-validation-action v3.5.0
Validates Gradle Wrapper JAR Files
25 versions - Latest release: about 2 years ago - 11,383 dependent repositories - 279 stars on GitHub
Top 0.7% on github actions
trufflesecurity/trufflehog v3.97.4
Find and verify leaked credentials in your source code.
360 versions - Latest release: 9 days ago - 519 dependent repositories - 27,715 stars on GitHub
bashofmann/neuvector-image-scan-action
Scans a container image for vulnerabilities with [NeuVector](https://neuvector.com)
Latest release: 2 days ago - 1 stars on GitHub
yu-iskw/action-terrascan v1.2.2
TODO: 🐶 Run terrascan with reviewdog on pull requests to improve code review experience.
15 versions - Latest release: over 4 years ago - 1 stars on GitHub
operous/test-ssh-action 0.1.0
SSH server vulnerability and security scanner with Operous
5 versions - Latest release: about 5 years ago - 8 stars on GitHub
suzuki-shunsuke/pinact-action v3.0.1 💰
Pin GitHub Actions and reusable workflows by pinact
18 versions - Latest release: 17 days ago - 76 stars on GitHub
oxsecurity/megalinter/flavors/dotnet v10.1.0 💰
[dotnet flavor] Combine all available linters to automatically validate your sources without conf...
183 versions - Latest release: 8 days ago - 2,580 stars on GitHub
oxsecurity/megalinter/flavors/php v10.1.0 💰
[php flavor] Combine all available linters to automatically validate your sources without configu...
183 versions - Latest release: 8 days ago - 2,580 stars on GitHub
oxsecurity/megalinter/flavors/cupcake v10.1.0 💰
[cupcake flavor] Combine all available linters to automatically validate your sources without con...
183 versions - Latest release: 8 days ago - 2,580 stars on GitHub
oxsecurity/megalinter/flavors/ci_light v10.1.0 💰
[ci_light flavor] Combine all available linters to automatically validate your sources without co...
183 versions - Latest release: 8 days ago - 2,577 stars on GitHub
oxsecurity/megalinter/flavors/python v10.1.0 💰
[python flavor] Combine all available linters to automatically validate your sources without conf...
183 versions - Latest release: 8 days ago - 2,577 stars on GitHub
oxsecurity/megalinter/flavors/c_cpp v10.1.0 💰
[c_cpp flavor] Combine all available linters to automatically validate your sources without confi...
183 versions - Latest release: 8 days ago - 2,577 stars on GitHub
oxsecurity/megalinter/flavors/documentation v10.1.0 💰
[documentation flavor] Combine all available linters to automatically validate your sources witho...
183 versions - Latest release: 8 days ago - 2,577 stars on GitHub
Top 0.9% on github actions
bridgecrewio/checkov-action v12.3123.0
Run Checkov against infrastructure as code, open source packages, container images, and CI/CD con...
1,658 versions - Latest release: 3 days ago - 507 dependent repositories - 314 stars on GitHub
Top 6.1% on github actions
Checkmarx/ast-github-action 2.3.42
Simplify Checkmarx Scanning of source code along with Result consumption leveraging Checkmarx AST...
96 versions - Latest release: 24 days ago - 22 dependent repositories - 3 stars on GitHub
ghr-actions/settings-check v0.1.0
Checks that a GitHub repos settings line up with a specification
1 version - Latest release: over 5 years ago - 1 dependent repositories - 3 stars on GitHub
Top 1.0% on github actions
zaproxy/action-baseline v0.15.0 💰
Scans the web application with the ZAP Baseline Scan
18 versions - Latest release: 11 months ago - 497 dependent repositories - 369 stars on GitHub
Top 9.1% on github actions
nowsecure/nowsecure-sbom-action v3.0.0
Generate a Mobile SBOM for an application and submit to the Dependency submission API
8 versions - Latest release: over 2 years ago - 9 dependent repositories - 8 stars on GitHub
Top 6.9% on github actions
google/oss-fuzz/infra/cifuzz/actions/run_fuzzers
Runs fuzz target binaries for a specified length of time.
Latest release: 2 days ago - 12,638 stars on GitHub
Top 1.1% on github actions
gitleaks/gitleaks-action v3.0.0 💰
run gitleaks on push and pull-request events
43 versions - Latest release: 4 months ago - 211 dependent repositories - 617 stars on GitHub
Top 0.3% on github actions
google-github-actions/auth v3.0.0
Authenticate to Google Cloud from GitHub Actions via Workload Identity Federation or service acco...
46 versions - Latest release: about 1 year ago - 4,745 dependent repositories - 1,353 stars on GitHub
chaitin/veinmind-action v1.0.5
Scan images for security issues with veinmind-tools
6 versions - Latest release: over 3 years ago - 2 dependent repositories - 8 stars on GitHub
sammcj/github-app-installation-token v2.18.0 💰
Run a GitHub Action as a GitHub App Installation instead of using secrets.GITHUB_TOKEN or a perso...
132 versions - Latest release: over 1 year ago - 2 dependent repositories - 5 stars on GitHub
Top 2.2% on github actions
bridgecrewio/bridgecrew-action v1.2343.0
Find and fix security and compliance issues in infrastructure as code, open source packages, cont...
1,100 versions - Latest release: almost 3 years ago - 114 dependent repositories - 73 stars on GitHub
fabasoad/setup-graudit-action v0.3.2 💰
This action installs graudit CLI tool.
13 versions - Latest release: 2 months ago - 1 stars on GitHub
Top 8.5% on github actions
federacy/scan-action 0.1.5
SAST and Dependency Scanning
6 versions - Latest release: over 3 years ago - 7 dependent repositories - 12 stars on GitHub
Top 4.7% on github actions
djdefi/gitavscan v23 💰
Anti Virus scan for malicious files in a Git repository
23 versions - Latest release: 8 months ago - 68 dependent repositories - 54 stars on GitHub
carhartl/talisman-secrets-scan-action v1.4.0
Scan an incoming range of commits for accidentally added secrets and sensitive information
7 versions - Latest release: over 3 years ago - 8 dependent repositories - 4 stars on GitHub
fortify/github-action v3.1.1
Run Fortify AST Scan and upload debug artifacts using actions/upload-artifact@v7 (GitHub.com).
43 versions - Latest release: 4 months ago - 18 stars on GitHub
Top 9.9% on github actions
Nekmo/pip-rating v0.2.2
Run pip-rating on the project to get the requirements rating based on criteria like freshness, po...
4 versions - Latest release: almost 3 years ago - 10 dependent repositories - 27 stars on GitHub
sysdiglabs/k8s-security-configwatch v1.0.0
Run security privilege comparison against Kubernetes workloads when a PR is open.
1 version - Latest release: over 6 years ago - 29 stars on GitHub
simonkowallik/irulescan-action v3
Use irulescan to check F5 iRules for security issues.
2 versions - Latest release: about 1 year ago - 1 dependent repositories - 2 stars on GitHub
kubeshop/monokle-action v0.3.3
Monokle Action analyzes your Kubernetes resources to quickly find misconfigurations.
9 versions - Latest release: over 2 years ago - 1 dependent repositories - 6 stars on GitHub
rmuir/uv-dependency-submission v1.1.1 💰
Parses uv lock files and submits to the dependency graph
4 versions - Latest release: 5 months ago - 23 stars on GitHub
gacts/gitleaks v1.3.3
Installs and runs GitLeaks in your actions workflow
20 versions - Latest release: 12 days ago - 70 dependent repositories - 22 stars on GitHub
rcowsill/workflow-scan-action v3.0.0
Scan GitHub Actions workflow files with CodeQL
4 versions - Latest release: over 2 years ago - 2 dependent repositories - 2 stars on GitHub
JosiahSiegel/runleaks v1.0.1
Identify potential leaks in GitHub action logs
5 versions - Latest release: over 3 years ago - 0 stars on GitHub
threatcl/drift-action v0.1.1
Threat model drift review for pull requests, powered by threatcl
3 versions - Latest release: about 1 month ago
Top 0.3% on github actions
securego/gosec v2.29.0 💰
Runs the gosec security checker
69 versions - Latest release: 18 days ago - 764 dependent repositories - 8,940 stars on GitHub
NeuraLegion/run-scan v1.5
Run a Bright Security scan right in GitHub Action
8 versions - Latest release: about 1 month ago - 26 dependent repositories - 4 stars on GitHub
Top 0.9% on github actions
actions-rs/audit-check v1.2.0 💰
Run cargo audit and check for security advisories
4 versions - Latest release: over 6 years ago - 2,306 dependent repositories - 176 stars on GitHub
GrantBirki/auditor-action v4.4.2 💰
The Auditor
33 versions - Latest release: over 1 year ago - 3 stars on GitHub
Top 1.7% on github actions
stelligent/cfn_nag v0.8.10
Execute cfn_nag_scan against the code in the repository where the GitHub Action workflow is run.
350 versions - Latest release: over 4 years ago - 45 dependent repositories - 1,308 stars on GitHub
Top 4.1% on github actions
reviewdog/action-detect-secrets v0.29.8 💰
🐶 Run detect-secrets with reviewdog on pull requests to improve code review experience.
97 versions - Latest release: about 1 month ago - 82 dependent repositories - 25 stars on GitHub
nuwaycloud/trivy-action v0.0.3
GitHub action to scan docker images for vulnerability issues using trivy.
3 versions - Latest release: almost 2 years ago - 1 stars on GitHub
adanalvarez/openai-security-review v0.2.0
A GitHub Action that reviews the modified files and comments with security recommendations
4 versions - Latest release: over 3 years ago - 3 stars on GitHub
alessiodionisi/setup-age-action v1.4.0 💰
Setup age and add it to the PATH
6 versions - Latest release: 6 months ago - 1 dependent repositories - 7 stars on GitHub
georgealton/iam-sarif-report v2.3.4
Generate SARIF from AWS IAM Access Analyzer findings
15 versions - Latest release: about 1 year ago - 6 stars on GitHub
dopplerhq/secrets-fetch-action v2.0.0
Fetch Doppler secrets for a specific Project and Config
9 versions - Latest release: 6 months ago - 28 stars on GitHub
GrantBirki/auditor-action-core v3.3.2 💰
The Auditor Action's Core
30 versions - Latest release: over 1 year ago - 1 dependent repositories - 0 stars on GitHub
google/oss-fuzz/infra/cifuzz/actions/build_fuzzers
Builds an OSS-Fuzz project's fuzzers.
Latest release: 2 days ago - 12,596 stars on GitHub
getplumber/plumber v0.4.55
Plumber detects CI/CD security issues in your GitHub workflows and gives you a score.
269 versions - Latest release: 6 days ago
hahwul/authz0 v1.1.2 💰
Unauthorized access can be identified based on URLs and Roles & Credentials.
5 versions - Latest release: over 4 years ago - 428 stars on GitHub
Top 4.3% on github actions
reload/github-security-jira v1.5.0
Synchronize the current repo alert state with JIRA and creates tickets accordingly.
8 versions - Latest release: almost 3 years ago - 13 dependent repositories - 52 stars on GitHub
guibranco/github-infisical-secrets-check-action v5.2.10
Run Infisical secrets check on a GitHub repository.
156 versions - Latest release: 27 days ago - 2 stars on GitHub
dortort/betterleaks-action v0.1.0
Scan for secrets and credentials using Betterleaks
1 version - Latest release: 5 months ago - 4 stars on GitHub
bugale/bugalint v5.1.2
Convert various linter outputs to standard formats
16 versions - Latest release: 22 days ago - 1 dependent repositories - 3 stars on GitHub
Top 4.4% on github actions
sysdiglabs/scan-action v6.3.6
Perform image analysis on locally built container image and post the result of the analysis to Sy...
26 versions - Latest release: 4 months ago - 66 dependent repositories - 29 stars on GitHub
hahwul/mzap v2.2.1 💰
Multiple target ZAP Scanning
15 versions - Latest release: 3 days ago - 112 stars on GitHub
Top 3.8% on github actions
philips-labs/slsa-provenance-action v0.9.0
An action to generate SLSA build provenance for an artifact
24 versions - Latest release: almost 3 years ago - 39 dependent repositories - 50 stars on GitHub
lfreleng-actions/python-audit-action v0.4.0
Check Python dependencies for known security vulnerabilities
18 versions - Latest release: about 1 month ago - 1 stars on GitHub
Top 3.5% on github actions
stackrox/kube-linter-action v1.0.7
Scan directory or file with kube-linter
11 versions - Latest release: over 1 year ago - 65 dependent repositories - 38 stars on GitHub
Top 3.8% on github actions
pypa/gh-action-pip-audit v1.1.0 💰
Use pip-audit to scan Python dependencies for known vulnerabilities
16 versions - Latest release: about 2 years ago - 131 dependent repositories - 88 stars on GitHub
docker/scout-action v1.24.0
List vulnerabilities in images; find better base images and upload an image SBOM to Docker Scout
58 versions - Latest release: about 1 month ago - 139 stars on GitHub
Top 5.0% on github actions
jpetrucciani/bandit-check 1.7.10 💰
GitHub action to lint your python code with bandit
12 versions - Latest release: almost 2 years ago - 84 dependent repositories - 16 stars on GitHub
OWASP/cve-lite-cli v1.28.0 💰
Run CVE Lite CLI in GitHub Actions for JS/TS dependency vulnerability scanning.
51 versions - Latest release: about 2 months ago - 692 stars on GitHub
Top 5.5% on github actions
andrewmcodes/bundler-audit-action v0.1.0 💰
GitHub Action for running bundler-audit
2 versions - Latest release: about 6 years ago - 19 dependent repositories - 17 stars on GitHub
HCL-TECH-SOFTWARE/appscan-sast-action v1.1.2
Scan for security issues in code
13 versions - Latest release: 11 days ago - 7 dependent repositories - 12 stars on GitHub
HCL-TECH-SOFTWARE/appscan-dast-action v1.0.7
Scan for security issues in web applications
8 versions - Latest release: over 1 year ago - 4 dependent repositories - 3 stars on GitHub
Top 8.5% on github actions
parasoft/run-cpptest-action 2.1.0
A GitHub Action for running Parasoft C/C++test to ensure code quality and compliance with MISRA, ...
20 versions - Latest release: 4 months ago - 5 dependent repositories - 15 stars on GitHub
sudo-bot/action-docker-sign latest
Sign docker images
1 version - Latest release: over 5 years ago - 10 dependent repositories - 6 stars on GitHub
Top 3.4% on github actions
zaproxy/action-api-scan v0.10.0 💰
Scans the web application with the ZAP API Scan
12 versions - Latest release: 11 months ago - 70 dependent repositories - 77 stars on GitHub
hahwul/zest-env v1.1.5 💰
Zest CLI in Github action
8 versions - Latest release: 12 months ago - 8 stars on GitHub
Top 0.6% on github actions
ossf/scorecard-action v2.4.4
Run OSSF Scorecard checks and output results in SARIF format
34 versions - Latest release: about 2 months ago - 6,465 dependent repositories - 410 stars on GitHub
Top 2.8% on github actions
lirantal/is-website-vulnerable 1.15.10
Scans a URL for publicly known JavaScript library vulnerabilities
56 versions - Latest release: over 6 years ago - 14 dependent repositories - 2,039 stars on GitHub
fabiocicerchia/gandalf v0.12.1 💰
Review a pull request with gandalf's scanners - inline comments, and findings ingested into GitHu...
11 versions - Latest release: 14 days ago - 0 stars on GitHub
embold/github-action-docker v2.0.0
Scan your code with Embold
5 versions - Latest release: 6 months ago - 1 dependent repositories - 3 stars on GitHub
Top 2.6% on github actions
triat/terraform-security-scan v3.2.0
Scan your terraform code with tfsec
22 versions - Latest release: almost 2 years ago - 54 dependent repositories - 112 stars on GitHub
Top 6.3% on github actions
victoriadrake/link-snitch v1.1.0 💰
Scans your site for broken links so you can fix them.
3 versions - Latest release: about 5 years ago - 9 dependent repositories - 66 stars on GitHub