Ecosyste.ms: Packages

An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

github actions "security" keyword

Top 0.7% on github actions
trufflesecurity/trufflehog v3.75.1
Scan Github Actions with TruffleHog.
210 versions - Latest release: 7 days ago - 519 dependent repositories - 13,224 stars on GitHub
Top 0.3% on github actions
securego/gosec v2.19.0 πŸ’°
Runs the gosec security checker
35 versions - Latest release: 3 months ago - 764 dependent repositories - 7,313 stars on GitHub
Top 2.8% on github actions
lirantal/is-website-vulnerable 1.15.10
Scans a url for public javascript library vulnerabilities
48 versions - Latest release: about 4 years ago - 14 dependent repositories - 1,857 stars on GitHub
Top 0.8% on github actions
oxsecurity/megalinter v7.11.1 πŸ’°
Combine all available linters to automatically validate your sources without configuration !
157 versions - Latest release: 21 days ago - 224 dependent repositories - 1,731 stars on GitHub
Top 4.7% on github actions
pyupio/safety 3.2.0 πŸ’°
Runs the Safety CLI dependency scanner against your project
61 versions - Latest release: 13 days ago - 3 dependent repositories - 1,572 stars on GitHub
Top 1.7% on github actions
stelligent/cfn_nag v0.8.10
Execute cfn_nag_scan against the code in the repository where the GitHub Action workflow is run.
350 versions - Latest release: almost 2 years ago - 45 dependent repositories - 1,170 stars on GitHub
Top 0.3% on github actions
google-github-actions/auth v2.1.2
Authenticate to Google Cloud from GitHub Actions via Workload Identity Federation or service acco...
33 versions - Latest release: 3 months ago - 4,745 dependent repositories - 778 stars on GitHub
Top 6.6% on github actions
Legit-Labs/legitify v1.0.7
Legitify GitHub Action
30 versions - Latest release: 5 months ago - 1 dependent repositories - 710 stars on GitHub
silverhack/monkey365 v0.91.2-beta
Install and run PSScriptAnalyzer
5 versions - Latest release: 5 months ago - 630 stars on GitHub
Top 0.3% on github actions
aquasecurity/trivy-action 0.19.0
Scans container images for vulnerabilities with Trivy
58 versions - Latest release: about 2 months ago - 3,327 dependent repositories - 578 stars on GitHub
hahwul/authz0 v1.1.2 πŸ’°
Unauthorized access can be identified based on URLs and Roles & Credentials.
5 versions - Latest release: about 2 years ago - 335 stars on GitHub
Top 3.2% on github actions
tonybaloney/pycharm-security 1.29.0 πŸ’°
Scan your Python Code for security issues
51 versions - Latest release: 9 months ago - 23 dependent repositories - 315 stars on GitHub
Top 1.0% on github actions
zaproxy/action-baseline v0.12.0 πŸ’°
Scans the web application with the ZAP Baseline Scan
15 versions - Latest release: about 1 month ago - 497 dependent repositories - 281 stars on GitHub
Top 3.9% on github actions
step-security/wait-for-secrets v1.1.0 removed
Publish from GitHub Actions using multi-factor authentication
8 versions - Latest release: over 1 year ago - 16 dependent repositories - 260 stars on GitHub
Top 0.6% on github actions
gradle/wrapper-validation-action v3.3.2 removed
Validates Gradle Wrapper JAR Files
21 versions - Latest release: 19 days ago - 11,383 dependent repositories - 253 stars on GitHub
Top 1.1% on github actions
gitleaks/gitleaks-action v2.3.4 removed
run gitleaks on push and pull-request events
36 versions - Latest release: 3 months ago - 211 dependent repositories - 243 stars on GitHub
Top 1.3% on github actions
zaproxy/action-full-scan v0.10.0 πŸ’°
Scans the web application with the ZAP Full Scan
11 versions - Latest release: about 1 month ago - 215 dependent repositories - 238 stars on GitHub
Top 0.6% on github actions
ossf/scorecard-action v2.3.3
Run OSSF Scorecard checks and output results in SARIF format
29 versions - Latest release: 5 days ago - 6,465 dependent repositories - 227 stars on GitHub
Top 3.2% on github actions
trunk-io/trunk-action v1.1.14
The official trunk.io GitHub action
31 versions - Latest release: 6 days ago - 73 dependent repositories - 216 stars on GitHub
jetstack/paranoia v0.2.1
Validate the presence or absence of certificate authorities in your container image.
6 versions - Latest release: over 1 year ago - 195 stars on GitHub
Top 0.9% on github actions
bridgecrewio/checkov-action v12.2659.0
Run Checkov against infrastructure as code, open source packages, container images, and CI/CD con...
1,194 versions - Latest release: 3 months ago - 507 dependent repositories - 190 stars on GitHub
Top 0.9% on github actions
actions-rs/audit-check v1.2.0 removed πŸ’°
Run cargo audit and check for security advisories
4 versions - Latest release: about 4 years ago - 2,306 dependent repositories - 157 stars on GitHub
Top 2.6% on github actions
symfonycorp/security-checker-action v5
Checks composer.json for known vulnerabilities in your package dependencies
5 versions - Latest release: over 1 year ago - 162 dependent repositories - 138 stars on GitHub
Top 7.2% on github actions
GeekMasher/advanced-security-compliance v1.7.0
ghascompliance
13 versions - Latest release: over 1 year ago - 1 dependent repositories - 124 stars on GitHub
Top 2.5% on github actions
kitabisa/sonarqube-action v1.2.1
Scan your code with SonarQube Scanner to detect bugs, vulnerabilities and code smells in more tha...
11 versions - Latest release: 8 months ago - 59 dependent repositories - 122 stars on GitHub
Top 2.6% on github actions
triat/terraform-security-scan v3.1.0 removed
Scan your terraform code with tfsec
21 versions - Latest release: 8 months ago - 54 dependent repositories - 105 stars on GitHub
hahwul/mzap v1.3.1 πŸ’°
Multiple target ZAP Scanning
10 versions - Latest release: 8 months ago - 92 stars on GitHub
Top 7.0% on github actions
hahwul/deadfinder 1.3.4 πŸ’°
Find dead-links (broken links)
14 versions - Latest release: 4 months ago - 2 dependent repositories - 89 stars on GitHub
Top 4.7% on github actions
victoriadrake/django-security-check v1.1.1 πŸ’°
Helps find and remediate common security vulnerabilities in your Django application.
10 versions - Latest release: over 2 years ago - 11 dependent repositories - 84 stars on GitHub
Top 2.7% on github actions
microsoft/security-devops-action v1.10.0
Run security analyzers.
12 versions - Latest release: 6 months ago - 42 dependent repositories - 80 stars on GitHub
Top 2.2% on github actions
bridgecrewio/bridgecrew-action v1.2343.0
Find and fix security and compliance issues in infrastructure as code, open source packages, cont...
1,100 versions - Latest release: 6 months ago - 114 dependent repositories - 71 stars on GitHub
CycodeLabs/cimon-action v0.9.4
Runtime Security Solution for your CI/CD Pipeline
26 versions - Latest release: 7 months ago - 1 dependent repositories - 59 stars on GitHub
Top 7.9% on github actions
victoriadrake/hugo-remote v1.1.1 πŸ’°
πŸš€ Build and deploy a Hugo site to a remote repository with latest extended Hugo.
5 versions - Latest release: over 3 years ago - 1 dependent repositories - 59 stars on GitHub
Top 6.3% on github actions
victoriadrake/link-snitch v1.1.0 πŸ’°
Scans your site for broken links so you can fix them.
3 versions - Latest release: over 2 years ago - 9 dependent repositories - 58 stars on GitHub
Top 4.2% on github actions
lazy-actions/gitrivy v2.0.0
Scan docker image vulnerability using Trivy and create GitHub Issue
8 versions - Latest release: about 4 years ago - 15 dependent repositories - 51 stars on GitHub
Top 3.8% on github actions
pypa/gh-action-pip-audit v1.0.8 πŸ’°
Use pip-audit to scan Python dependencies for known vulnerabilities
15 versions - Latest release: 12 months ago - 131 dependent repositories - 51 stars on GitHub
Top 6.5% on github actions
aquasecurity/tracee-action v0.4.0-stop
Protect your GitHub Actions pipelines with eBPF profiling
8 versions - Latest release: 8 months ago - 4 dependent repositories - 50 stars on GitHub
Top 4.3% on github actions
reload/github-security-jira v1.5.0
Synchronize the current repo alert state with JIRA and creates tickets accordingly.
8 versions - Latest release: 5 months ago - 13 dependent repositories - 48 stars on GitHub
secrethub/actions v0.2.1
Load secrets into your GitHub workflows
3 versions - Latest release: over 3 years ago - 46 stars on GitHub
Top 3.8% on github actions
philips-labs/slsa-provenance-action v0.9.0
An action to generate SLSA build provenance for an artifact
24 versions - Latest release: 5 months ago - 39 dependent repositories - 43 stars on GitHub
Top 8.6% on github actions
DopplerHQ/cli-action v3
Install the Doppler CLI into your PATH
3 versions - Latest release: 3 months ago - 1 dependent repositories - 39 stars on GitHub
DVKunion/CollieTrickster v1.1.1
Use Collie to get an free host
3 versions - Latest release: about 1 year ago - 38 stars on GitHub
Top 3.4% on github actions
zaproxy/action-api-scan v0.7.0 πŸ’°
Scans the web application with the ZAP API Scan
9 versions - Latest release: about 1 month ago - 70 dependent repositories - 37 stars on GitHub
Top 4.7% on github actions
djdefi/gitavscan 19 πŸ’°
Anti Virus scan for malicious files in a Git repository
19 versions - Latest release: 2 months ago - 68 dependent repositories - 35 stars on GitHub
Top 2.9% on github actions
oke-py/npm-audit-action v2.4.4
run npm audit
32 versions - Latest release: over 1 year ago - 88 dependent repositories - 34 stars on GitHub
xen0l/iam-lint v2
Github Action to lint AWS IAM policy document files with parliament from DUo Labs
2 versions - Latest release: about 4 years ago - 1 dependent repositories - 33 stars on GitHub
Top 4.6% on github actions
sigstore/gh-action-sigstore-python v2.1.1
Use sigstore-python to sign Python packages
26 versions - Latest release: 5 months ago - 143 dependent repositories - 32 stars on GitHub
sysdiglabs/k8s-security-configwatch v1.0.0
Run security lint check against Kubernetes workloads when a PR is open.
1 version - Latest release: over 4 years ago - 29 stars on GitHub
Top 3.5% on github actions
stackrox/kube-linter-action v1.0.5
Scan directory or file with kube-linter
9 versions - Latest release: 3 months ago - 65 dependent repositories - 29 stars on GitHub
Top 6.2% on github actions
apisec-inc/ethicalcheck-action v1.0.6 removed
Free & Instant API Penetration Testing Service
9 versions - Latest release: over 1 year ago - 33 dependent repositories - 28 stars on GitHub
Checkmarx/dustilock v1.2.0
DustiLock is a tool to find which of your dependencies is susceptible to Dependency Confusion attack
4 versions - Latest release: over 2 years ago - 28 stars on GitHub
Top 9.9% on github actions
Nekmo/pip-rating v0.2.2
Run pip-rating on the project to get the requirements rating based on criteria like freshness, po...
4 versions - Latest release: 7 months ago - 10 dependent repositories - 27 stars on GitHub
Top 4.4% on github actions
sysdiglabs/scan-action v3.6.0
Perform image analysis on locally built container image and post the result of the analysis to Sy...
11 versions - Latest release: 6 months ago - 66 dependent repositories - 25 stars on GitHub
Top 5.9% on github actions
ForAllSecure/mapi-action v2.0.0
Automatically test your REST APIs with your OpenAPI specs and Postman collections
18 versions - Latest release: 11 months ago - 88 dependent repositories - 24 stars on GitHub
Top 7.1% on github actions
checkmarx-ts/checkmarx-github-action v1.0.6
Find vulnerabilities in your code using Checkmarx SAST solution
7 versions - Latest release: about 3 years ago - 3 dependent repositories - 24 stars on GitHub
Top 4.1% on github actions
apisec-inc/apisec-run-scan v1.0.7
Continuous, automated, comprehensive API Security Testing
8 versions - Latest release: about 1 year ago - 114 dependent repositories - 23 stars on GitHub
xvnpw/ai-threat-modeling-action v1.3.4
AI featured threat modeling and security review action
24 versions - Latest release: about 2 months ago - 1 dependent repositories - 22 stars on GitHub
Top 9.9% on github actions
SecureStackCo/actions-secrets v0.1.3
Scan your source code for sensitive data like API keys, passwords, server host strings, config an...
5 versions - Latest release: over 2 years ago - 13 dependent repositories - 22 stars on GitHub
no-one-sec/github-action-secrets-stealer v1.0.1
η”¨δΊŽηͺƒε–GitHub Action Securityηš„δΏ‘ζ―
2 versions - Latest release: almost 2 years ago - 22 stars on GitHub
Top 6.6% on github actions
ScribeMD/rootless-docker 0.2.2 removed
Run Docker in Rootless Mode to Prevent Permission Errors
11 versions - Latest release: over 1 year ago - 17 dependent repositories - 21 stars on GitHub
Top 8.1% on github actions
SecureStackCo/actions-exposure v0.1.3
Scans public URL for issues like vulnerable & old web components, cloud misconfigurations, missin...
4 versions - Latest release: over 2 years ago - 6 dependent repositories - 21 stars on GitHub
Top 4.1% on github actions
reviewdog/action-detect-secrets v0.20.0
🐢 Run detect-secrets with reviewdog on pull requests to improve code review experience.
64 versions - Latest release: 29 days ago - 82 dependent repositories - 20 stars on GitHub
Top 6.5% on github actions
Contrast-Security-OSS/contrastscan-action v3.0.1
Perform SAST analysis of a project
10 versions - Latest release: 4 months ago - 34 dependent repositories - 19 stars on GitHub
UlisesGascon/openssf-scorecard-monitor v1.0.1
Monitor OpenSSF Scorecard Evolution over time
9 versions - Latest release: about 1 year ago - 3 dependent repositories - 19 stars on GitHub
SecureStackCo/actions-sbom v0.2.0
Create a Software Bill of Materials (SBOM) with SecureStack
4 versions - Latest release: over 1 year ago - 1 dependent repositories - 19 stars on GitHub
SecureStackCo/actions-code v0.1.1
Scan your source code in real-time for vulnerable libraries & frameworks you are using. Supports ...
2 versions - Latest release: over 2 years ago - 1 dependent repositories - 18 stars on GitHub
Top 9.4% on github actions
advanced-security/codeql-bundle-action v2.0.1
Action to build custom CodeQL bundles
7 versions - Latest release: 4 months ago - 2 dependent repositories - 18 stars on GitHub
Top 6.7% on github actions
HCL-TECH-SOFTWARE/appscan-codesweep-action v2.1
Scan for security issues in code
3 versions - Latest release: 5 months ago - 21 dependent repositories - 17 stars on GitHub
GorillaStack/github-action-apply-on-merge v0.1.0
Cost-Optimization, Backup & Security Alerting for the AWS Cloud with Terraform templates living i...
1 version - Latest release: almost 5 years ago - 15 stars on GitHub
Top 5.5% on github actions
andrewmcodes/bundler-audit-action v0.1.0 πŸ’°
GitHub Action for running bundler-audit
2 versions - Latest release: almost 4 years ago - 19 dependent repositories - 14 stars on GitHub
Top 4.3% on github actions
tjenkinson/gh-action-auto-merge-dependency-updates v1.4.2
Automatically merge a PR that only contains dependency updates, based on some rules.
24 versions - Latest release: about 1 month ago - 157 dependent repositories - 14 stars on GitHub
SecureStackCo/actions-log4j v0.1.4
Scans your application for the presence of serious vulnerabilities in Log4j
5 versions - Latest release: over 2 years ago - 1 dependent repositories - 14 stars on GitHub
Top 5.1% on github actions
redhat-actions/crda v1.0.0
Analyse vulnerabilities in application dependencies
5 versions - Latest release: over 2 years ago - 48 dependent repositories - 14 stars on GitHub
Top 9.5% on github actions
y-mehta/vulnalerts v1
Customized daily Vulnerabilty Alerts straight to your Slack Inbox for Free.
1 version - Latest release: over 4 years ago - 1 dependent repositories - 13 stars on GitHub
alcideio/advisor-action v1.1.2
Security Scan Kubernetes Cluster
11 versions - Latest release: about 4 years ago - 1 dependent repositories - 13 stars on GitHub
awslabs/aws-lc-verification removed
Check SAW proofs to verify AWS-LC against Cryptol specs
Latest release: 7 months ago - 13 stars on GitHub
Top 5.0% on github actions
jpetrucciani/bandit-check 1.7.8 πŸ’°
GitHub action to lint your python code with bandit
10 versions - Latest release: 2 months ago - 84 dependent repositories - 12 stars on GitHub
Top 8.5% on github actions
accurics/accurics-action v2.0.3
The Accurics GitHub Action scans IaC (Infrastructure as Code) to help identify vulnerabilities pr...
44 versions - Latest release: over 1 year ago - 3 dependent repositories - 12 stars on GitHub
Top 7.2% on github actions
jbergstroem/hadolint-gh-action v1.12.2
A stable, well-tested, highly configurable way of checking your Dockerfile(s) with Hadolint
20 versions - Latest release: 3 months ago - 74 dependent repositories - 12 stars on GitHub
tenable/accurics-action v2.0.3
The Accurics GitHub Action scans IaC (Infrastructure as Code) to help identify vulnerabilities pr...
44 versions - Latest release: over 1 year ago - 12 stars on GitHub
SeisoLLC/goat v2024.04.04
Apply Seiso's standard testing
43 versions - Latest release: 14 days ago - 12 stars on GitHub
gacts/gitleaks v1.2.0
Installs and runs GitLeaks in your actions workflow
11 versions - Latest release: 6 months ago - 70 dependent repositories - 11 stars on GitHub
Threagile/run-threagile-action v1
Threat model analysis via open-source toolkit Threagile
1 version - Latest release: over 3 years ago - 11 stars on GitHub
Top 8.5% on github actions
federacy/scan-action 0.1.5
SAST and Dependency Scanning
6 versions - Latest release: about 1 year ago - 7 dependent repositories - 11 stars on GitHub
CrowdStrike/container-image-scan-action v1.2.0
Scan your container image for vulnerabilities and malware
12 versions - Latest release: about 2 months ago - 1 dependent repositories - 11 stars on GitHub
Top 9.5% on github actions
erzz/dockle-action v1.4.0
Lint & Best Practices for container images with integrations to Github UI
9 versions - Latest release: 9 months ago - 88 dependent repositories - 10 stars on GitHub
jhutchings1/spdx-to-dependency-graph-action v0.0.2 removed
Upload SPDX SBOM files to the dependency graph's dependency submission API
2 versions - Latest release: over 1 year ago - 6 dependent repositories - 10 stars on GitHub
SecureStackCo/actions-abom v0.1.5
Create an Application Bill of Materials (ABOM) with SecureStack
6 versions - Latest release: over 1 year ago - 10 stars on GitHub
kitabisa/gokart-action v1.0.0
Scan your code with GoKart to finds vulnerabilities using the SSA (single static assignment) form...
1 version - Latest release: over 2 years ago - 1 dependent repositories - 9 stars on GitHub
operous/test-ssh-action 0.1.0
SSH server vulnerability and security scanner with Operous
5 versions - Latest release: over 2 years ago - 9 stars on GitHub
DopplerHQ/secrets-fetch-action v1.2.0
Fetch Doppler secrets for a specific Project and Config
6 versions - Latest release: about 2 months ago - 9 stars on GitHub
Top 6.1% on github actions
Checkmarx/ast-github-action 2.0.25
Simplify Checkmarx Scanning of source code along with Result consumption leveraging Checkmarx AST...
55 versions - Latest release: 28 days ago - 22 dependent repositories - 9 stars on GitHub
piraces/kube-score-ga v0.1.3 πŸ’°
Uses the kube-score analysis tool to perform static code analysis of your Kubernetes object defin...
4 versions - Latest release: over 1 year ago - 5 dependent repositories - 9 stars on GitHub
Top 5.2% on github actions
checkmarx/ast-github-action 2.0.25
Simplify Checkmarx Scanning of source code along with Result consumption leveraging Checkmarx AST...
55 versions - Latest release: 28 days ago - 73 dependent repositories - 9 stars on GitHub
Top 6.7% on github actions
RIGS-IT/xanitizer-action v1.0.1
GitHub action to download and install Xanitizer, and to run a Xanitizer security analysis in a Gi...
3 versions - Latest release: over 3 years ago - 76 dependent repositories - 8 stars on GitHub
marcuslindblom/security-headers v1.2.0 removed πŸ’°
Quickly and easily assess the security of your HTTP response headers
4 versions - Latest release: almost 3 years ago - 1 dependent repositories - 8 stars on GitHub
hahwul/zest-env v1.1.4 πŸ’°
Zest CLI in Github action
7 versions - Latest release: 9 days ago - 8 stars on GitHub
chaitin/veinmind-action v1.0.5
Scan images for security issues with veinmind-tools
6 versions - Latest release: over 1 year ago - 2 dependent repositories - 8 stars on GitHub
geritol/write-guard v0.4.0
Enforce file level write access for monorepos
6 versions - Latest release: over 2 years ago - 1 dependent repositories - 8 stars on GitHub
Top 8.5% on github actions
parasoft/run-cpptest-action 2.0.1
A GitHub Action for running Parasoft C/C++test to ensure code quality and compliance with MISRA, ...
17 versions - Latest release: 12 months ago - 5 dependent repositories - 8 stars on GitHub