advanced-security repositories

102 repositories

secret-scanning-notifications
Public
A GitHub Action that sends email notifications to security manager team for any new or resolved secret scanning alerts based on a set frequency
TypeScript
•
MIT License
•3•1•0•9•Updated Aug 31, 2026Aug 31, 2026
secret-scanning-review-action
Public
Action to detect if a secret is initially detected in a pull request
PowerShell
•
MIT License
•8•24•4•6•Updated Aug 31, 2026Aug 31, 2026
codeql-development-template
Public template
Copilot-native repository template for CodeQL query development
CodeQL
•
MIT License
•3•11•1•7•Updated Aug 31, 2026Aug 31, 2026
advanced-security-material
Public
security code-scanning codeql
security code-scanning codeql advanced-security advanced-security-training
Shell
•26•80•2•8•Updated Aug 29, 2026Aug 29, 2026
codeql-extractor-iac
Public
CodeQL Extractor, Library, and Queries for Infrastructure as Code
CodeQL
•
MIT License
•12•62•14•6•Updated Aug 29, 2026Aug 29, 2026
policy-as-code
Public
GitHub Advanced Security Policy as Code
Python
•
MIT License
•22•106•3•1•Updated Aug 29, 2026Aug 29, 2026
spdx-dependency-submission-action
Public
upload an SPDX 2.2 formatted SBOM to GitHub's dependency submission API
dependency-submission
dependency-submission
JavaScript
•
MIT License
•8•30•0•0•Updated Aug 29, 2026Aug 29, 2026
reusable-workflows
Public
Advanced Security Reusable GitHub Actions Workflows
MIT License
•5•5•4•3•Updated Aug 29, 2026Aug 29, 2026
validate-secrets
Public
Extensible secret validation tool for GitHub Secret Scanning and beyond.
Python
•
MIT License
•2•2•1•1•Updated Aug 28, 2026Aug 28, 2026
codeql-sap-js
Public
CodeQL models for SAP JavaScript frameworks CAP, UI5 and XSJS
TypeScript
•
MIT License
•5•8•11•5•Updated Aug 28, 2026Aug 28, 2026
codeql-development-toolkit
Public
The CodeQL Development toolkit is a tool for making common CodeQL development workflows easier.
C#
•
MIT License
•3•9•11•5•Updated Aug 28, 2026Aug 28, 2026
codeql-bundle
Public
CLI to build a custom CodeQL bundle
Python
•
MIT License
•6•15•6•4•Updated Aug 28, 2026Aug 28, 2026
generate-sbom-action
Public
An Action to wrap creating an SBOM via REST API
TypeScript
•
MIT License
•5•20•2•7•Updated Aug 28, 2026Aug 28, 2026
sample-javascript-monorepo
Public
Detached fork of babel/babel to use as a TypeScript monorepo sample with 150+ packages using the monorepo-code-scanning-action https://github.com/advanced-secu…
TypeScript
•
MIT License
•1•0•0•6•Updated Aug 28, 2026Aug 28, 2026
codeql-development-mcp-server
Public
LLM <-- MCP --> CodeQL( AST | CFG | CLI | LSP )
mcp static-analysis ast
mcp static-analysis ast code-quality cfg lsp code-security codeql copilot-enabled
TypeScript
•
Other
•3•34•4•0•Updated Aug 28, 2026Aug 28, 2026
cocoapods-dependency-submission-action
Public
CocoaPods Lockfile Dependency Submission Action
Python
•
MIT License
•3•5•2•2•Updated Aug 27, 2026Aug 27, 2026
sarif-toolkit
Public
All things SARIF, as an Action
Python
•
MIT License
•4•4•4•4•Updated Aug 26, 2026Aug 26, 2026
component-detection-dependency-submission-action
Public
This GitHub Action runs the microsoft/component-detection library to automate dependency extraction at build time.
github-actions dependency-submission
github-actions dependency-submission
TypeScript
•
MIT License
•30•26•6•3•Updated Aug 26, 2026Aug 26, 2026
ghe-cross-instance-committers
Public
A script which will return the total number of unique de-deuped active committers across multiple GHES instances
ghas
ghas
TypeScript
•
MIT License
•5•6•2•8•Updated Aug 26, 2026Aug 26, 2026
github-sbom-toolkit
Public
Gather SBOMs from the GitHub Dependency Graph and report matches with packages, such as malware advisories from the GitHub Advisory Database or PURLs of your ch…
malware dependency-graph dependencies
malware dependency-graph dependencies supplychain purl sbom advanced-security ghas
TypeScript
•
MIT License
•9•20•0•1•Updated Aug 26, 2026Aug 26, 2026
codeql-extractor-action
Public
specify a CodeQL extractor to be used in your workflows as an author of an Extractor.
Rust
•
MIT License
•0•2•1•7•Updated Aug 26, 2026Aug 26, 2026
ghas-copilot-canvas
Public
MIT License
•0•3•1•1•Updated Aug 20, 2026Aug 20, 2026
awesome-secret-scanning
Public
A curated list of awesome GitHub Advanced Security secret scanning resources.
awesome awesome-list secret-scanning
awesome awesome-list secret-scanning github-advanced-security
PowerShell
•
MIT License
•6•17•1•0•Updated Aug 20, 2026Aug 20, 2026
flake8-sarif-formatter
Public
Format Flake8 results as SARIF for input to SAST tools such as GitHub Code Scanning
Python
•
MIT License
•2•2•1•7•Updated Aug 20, 2026Aug 20, 2026
maven-dependency-submission-action
Public
GitHub Action for submitting Maven dependencies
dependency-submission
dependency-submission
TypeScript
•
MIT License
•39•60•19•11•Updated Aug 18, 2026Aug 18, 2026
dependabot-version-updates
Public
Java
•
GNU General Public License v3.0
•2•0•0•0•Updated Aug 15, 2026Aug 15, 2026
ghas-to-csv
Public
Play with GHAS API to provide posture data over time
csv github-actions github-advanced-security
csv github-actions github-advanced-security
Python
•
MIT License
•19•41•1•2•Updated Aug 11, 2026Aug 11, 2026
dismiss-alerts
Public
Dismiss GitHub Code Scanning alerts from SARIF suppression data
sarif code-scanning sast
sarif code-scanning sast code-security ghas github-advanced-security
TypeScript
•
MIT License
•5•23•2•13•Updated Aug 11, 2026Aug 11, 2026
enterprise-security-team
Public
Manage a uniform team of security managers for every organization in your enterprise
enterprise ghas
enterprise ghas
Python
•
MIT License
•6•24•0•2•Updated Aug 11, 2026Aug 11, 2026
ghas-reviewer-app
Public
GitHub Advanced Security Pull Request Security Team required review GitHub App
github-app advanced-security
github-app advanced-security
Python
•
MIT License
•11•36•6•6•Updated Aug 11, 2026Aug 11, 2026

ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.

Repositories list

102 repositories