https://github.com/securestackco/visualizing-software-supply-chain

A project to visualize the software supply chain

Last synced: 26 Mar 2025

https://github.com/securestackco/actions-secrets

Adding this GitHub Action will scan your repository for sensitive data in your source code. We find things like passwords, server host strings, API keys, .env and config files and more

actions deployment devsecops github-actions secrets secrets-detection secrets-discovery-service secrets-scan secrets-scanner security security-automation security-tools vulnerability-detection

Last synced: 30 Jul 2025

https://github.com/securestackco/actions-sbom

A GitHub Action that creates a SBOM from your application so you can meet compliance and security requirements. Add this to your dev, staging and prod steps and SecureStack will make sure that what you've just deployed is secure and meets your requirements, and has the SBOM to show it!

automation-testing bill-of-materials deployment deployment-automation o sbom sbom-distribution sbom-generator sbom-repository sbom-tool security security-audit security-automation

Last synced: 12 Jul 2025

https://github.com/securestackco/actions-code

A GitHub Action for using SecureStack to analyse a repository codebase for vulnerabilities in library dependencies (software composition analysis).

deployment deployment-automation deployment-pipeline devsecops github-actions security security-automation security-tools software-composition-analysis vulnerability-detection vulnerability-scanner

Last synced: 30 Jul 2025

https://github.com/securestackco/actions-exposure

A GitHub Action that scans your public web applications after every deployment. Add this to your dev, staging and prod steps and SecureStack will make sure that what you've just deployed is secure and meets your requirements.

actions cloud-security cloud-security-posture-management deployment deployment-automation deployment-pipeline dynamic-analysis github-actions secrets-detection security software-composition-analysis vulnerability-detection vulnerability-scanning web-application web-vulnerability web-vulnerability-scanner

Last synced: 07 Aug 2025

https://github.com/securestackco/actions-all-in-one

All of our GitHub Actions rolled into one. Or as we like to say: One GitHub Action to rule them all!

deployment-pipeline devsecops devsecops-best-practices devsecops-pipeline github-actions secret-scanning security-automation software-composition-analysis vulnerability-detection vulnerability-scanner vulnerability-scanning web-vulnerability-scanner

Last synced: 30 Jul 2025

https://github.com/securestackco/actions-log4j

A GitHub Action that scans your public web applications for log4j vulnerabilities after every deployment. Add this to your dev, staging and prod steps and SecureStack will make sure that what you've just deployed is secure and meets your requirements.

devsecops github-actions java java-vulnerability java8 jre log4j log4j-rce log4j2 log4js log4shell scanning security security-automation security-tools software-composition-analysis static-analysis vulnerabilities vulnerability-assessment vulnerability-scanner

Last synced: 30 Jul 2025

https://github.com/securestackco/actions-abom

SecureStack Application Bill of Materials (ABOM/SBOM)

abom automation automation-testing bill-of-materials deployment sbom security security-audit security-automation

Last synced: 08 Oct 2025

https://github.com/securestackco/essential8-sdlc

Software supply chain and the Essential 8 - How to evolve Essential 8 for the modern world

Last synced: 26 Mar 2025

https://github.com/securestackco/app.cheapcryptobank.com

Cheap Crypto Bank App source code

Last synced: 30 Jul 2025

https://github.com/securestackco/application-composition-graph

This is a description and example of a the concept of an "Application Composition Graph". This graph can be visually represented in a graph format, but more importantly it can be represented in JSON.

Last synced: 26 Mar 2025

https://github.com/securestackco/accesspress-mitigation

Resources to mitigate the AccessPress Theme vulnerabilities

Last synced: 06 Sep 2025

https://github.com/securestackco/actions

A set of GitHub actions for checking your application for vulnerabilities

actions securestack

Last synced: 26 Mar 2025

https://github.com/securestackco/aecham

Application Environment Composition and Hierarchy Abstraction Model

Last synced: 30 Jun 2025

https://github.com/securestackco/securestack-chrome-extension

SecureStack Chrome Extension

Last synced: 14 Jul 2025

https://github.com/securestackco/sat4l

Security Automation Toolkit for Linux

Last synced: 26 Mar 2025