Data

Tools

Indexes

Applications

Experiments

Awesome

An open API service indexing awesome lists of open source software.

Projects in Awesome Lists by advanced-security

A curated list of projects in awesome lists by advanced-security .

https://github.com/advanced-security/gh-sbom

Generate SBOMs with gh CLI

gh-extension

Last synced: 10 Apr 2025

https://github.com/advanced-security/policy-as-code

GitHub Advanced Security Policy as Code

Last synced: 28 Apr 2025

https://github.com/advanced-security/codeql-queries

[Deprecated] GitHub's Field Team's CodeQL Custom Queries, Suites, and Configurations. See GitHubSecurityLab/CodeQL-Community-Packs instead

Last synced: 10 Aug 2026

https://github.com/advanced-security/codeql-extractor-iac

CodeQL Extractor, Library, and Queries for Infrastructure as Code

Last synced: 12 Feb 2026

https://github.com/advanced-security/maven-dependency-submission-action

GitHub Action for submitting Maven dependencies

Last synced: 15 Apr 2025

https://github.com/advanced-security/gssar

GitHub Secret Scanning Auto Remediator (GSSAR)

aws github javascript remediation secret-scanning typescript

Last synced: 28 Apr 2025

https://github.com/advanced-security/GSSAR

GitHub Secret Scanning Auto Remediator (GSSAR)

aws github javascript remediation secret-scanning typescript

Last synced: 28 Apr 2025

https://github.com/advanced-security/ghas-to-csv

Play with GHAS API to provide posture data over time

csv github-actions github-advanced-security

Last synced: 15 Jan 2026

https://github.com/advanced-security/filter-sarif

GitHub Action for filtering Code Scanning alerts by path and id

code-scanning github-advanced-security sarif

Last synced: 14 Sep 2025

https://github.com/advanced-security/ghas-reviewer-app

GitHub Advanced Security Pull Request Security Team required review GitHub App

advanced-security github-app

Last synced: 30 Oct 2025

https://github.com/advanced-security/codeql-bundle-action

Action to retrofit a CodeQL bundle with additional queries, libraries, and customizations

code-scanning codeql security

Last synced: 10 Mar 2026

https://github.com/advanced-security/enterprise-security-team

Manage a uniform team of security managers for every organization in your enterprise

enterprise ghas

Last synced: 23 Feb 2026

https://github.com/advanced-security/spdx-dependency-submission-action

upload an SPDX 2.2 formatted SBOM to GitHub's dependency submission API

Last synced: 11 Feb 2026

https://github.com/advanced-security/gh-codeql-scan

GH CLI CodeQL Scan Extension

codeql gh-extension ghas

Last synced: 16 Sep 2025

https://github.com/advanced-security/sample-codeql-pipeline-config

Integrate CodeQL into CI/CD pipelines, using the CodeQL CLI Bundle for Automated Code Scanning

Last synced: 21 Aug 2025

https://github.com/advanced-security/probot-security-alerts

Sample GitHub App which monitors and enforces rules for code scanning, Dependabot, and secret scanning alerts

ghas nodejs probot sample security security-alerts typescript

Last synced: 23 Oct 2025

https://github.com/advanced-security/generate-sbom-action

An Action to wrap creating an SBOM via REST API

Last synced: 25 Jun 2025

https://github.com/advanced-security/codeql-workshops-staging

Original workshops and staging area for new ones

Last synced: 21 Nov 2025

https://github.com/advanced-security/secret-scanning-review-action

Action to detect if a secret is initially detected in a pull request

Last synced: 04 Feb 2026

https://github.com/advanced-security/set-codeql-language-matrix

Automatically set the CodeQL matrix job using the languages in your repository.

codeql

Last synced: 28 Apr 2025

https://github.com/advanced-security/ghas-license-utilization

Optimize the utilization of GHAS licenses in an enterprise (or organization)

advanced-security ghas

Last synced: 28 Apr 2025

https://github.com/advanced-security/monorepo-filtering-workaround

A monorepo filtering workaround for GitHub Advanced Security Code Scanning using renaming of the scanning tool in an Actions workflow

actions-workflow advanced-security code-scanning codeql ghas monorepo sarif sast

Last synced: 28 Apr 2025

https://github.com/advanced-security/grab_ql

Grab some/all of CodeQL CLI binary, QL library, VSCode starter workspace, VSCode and VSCode QL extension

Last synced: 17 Jun 2025

https://github.com/advanced-security/mrva-code-search

Use code search to populate an MRVA repo list in VSCode

Last synced: 09 Jul 2025

https://github.com/advanced-security/sarif-viewer

JetBrains IDE plugin for displaying SARIF from GHAS or from a local file

Last synced: 28 Apr 2025

https://github.com/advanced-security/demo-java

GitHub Advanced Security scanning tutorial repository for Java

advanced-security demo devsecops example security static-analysis

Last synced: 12 Apr 2025

https://github.com/advanced-security/codeql-sarif-security-standard-annotator

Compare a CodeQL SARIF results file to a security standard CWE list and annotate the SARIF rules with a tag to highlight results applicable to the security standard

Last synced: 28 Apr 2025

https://github.com/advanced-security/cbom-action

Create a Crypto Bill of Materials using CodeQL

Last synced: 28 Apr 2025

https://github.com/advanced-security/codeql-summarize

CodeQL Summary Generator

Last synced: 28 Apr 2025

https://github.com/advanced-security/dependabot-kev-action

Action to detect if any open Dependabot alerts are in the CISA Known Exploited Vulnerabilities (KEV) Catalog of CVEs and fail the workflow.

Last synced: 28 Apr 2025

https://github.com/advanced-security/dependabot-epss-action

Action to detect if any open :dependabot: Dependabot alert CVEs exceed an EPSS threshold and fail the workflow.

dependabot epss

Last synced: 28 Apr 2025

https://github.com/advanced-security/teams-secret-scanning-notifier-azure-function

Microsoft Teams notifier for Secret Scanning alerts from GitHub Advanced Security, using a GitHub App and Azure Function

azure-function github-advanced-security github-app microsoft-teams-bot secret-scanning security-team

Last synced: 28 Apr 2025

https://github.com/advanced-security/spotbugs-findsecbugs-action

Run SpotBugs with FindSecBugs on Java and other JVM languages (e.g. Scala), and upload the results to GitHub Code Scanning

Last synced: 28 Oct 2025

https://github.com/advanced-security/ghe-cross-instance-committers

A script which will return the total number of unique de-deuped active committers across multiple GHES instances

ghas

Last synced: 12 Oct 2025

https://github.com/advanced-security/monorepo-code-scanning-action

Focus SAST scans (with CodeQL) on just the changed parts of your monorepo, split up as you define

actions advanced-security code-scanning-ready codeql monorepo sast

Last synced: 14 Apr 2025

https://github.com/advanced-security/codeql-sap-js

CodeQL models for SAP JavaScript frameworks CAP, UI5 and XSJS

Last synced: 22 Apr 2026

https://github.com/advanced-security/codeql-development-toolkit

The CodeQL Development toolkit is a tool for making common CodeQL development workflows easier.

Last synced: 28 Apr 2025

https://github.com/advanced-security/dart-analyzer-sarif

Convert `dart analyze` CLI output into SARIF

Last synced: 28 Apr 2025

https://github.com/advanced-security/remap-sarif

Remap a SARIF file with sourcemaps

Last synced: 19 Oct 2025

https://github.com/advanced-security/codeql-container

CodeQL Docker image

Last synced: 04 Oct 2025

https://github.com/advanced-security/gh-add-files

A GitHub CLI Extension that allows you to add files to your GitHub repositories directly from the command line

gh-extension

Last synced: 28 Apr 2025

https://github.com/advanced-security/codeql-bundle

CLI to build a custom CodeQL bundle

Last synced: 28 Apr 2025

https://github.com/advanced-security/ghas-api-python-scripts

GitHub Advanced Security scripts to interact with parts of the API, driven by a lightweight GitHub API wrapper written in Python

Last synced: 12 Apr 2026

https://github.com/advanced-security/github-app-auth

Utility to generate tokens to interact with the GitHub API via GitHub App integration

authentication ci-cd github github-api github-app

Last synced: 28 Apr 2025

https://github.com/advanced-security/cocoapods-dependency-submission-action

CocoaPods Lockfile Dependency Submission Action

Last synced: 28 Apr 2025

https://github.com/advanced-security/codeql-development-template

Copilot-native repository template for CodeQL query development

Last synced: 06 Jan 2026

https://github.com/advanced-security/codeql-qtil

A library with a wide variety of handy CodeQL utilities, from simple to complex.

Last synced: 07 Feb 2026

https://github.com/advanced-security/sarif-toolkit

All things SARIF, as an Action

Last synced: 28 Feb 2026

https://github.com/advanced-security/codeql-coding-standards-bundle-releases

CodeQL bundles containing the CodeQL Coding Standards queries

Last synced: 23 Jul 2025

https://github.com/advanced-security/qlsh

qlsh - a CodeQL REPL/shell for running interactive queries against a CodeQL database

Last synced: 09 Feb 2026

https://github.com/advanced-security/brew-dependency-submission-action

Brew Lockfile Dependency Submission Action

actions brew homebrew

Last synced: 12 May 2025

https://github.com/advanced-security/aws-github-boilerplate

A boilerplate for an application reacting to webhooks from GitHub, deployed to AWS.

aws boilerplate-template github-apps webhooks

Last synced: 30 Apr 2025

https://github.com/advanced-security/codeql-extractor-action

CodeQL Extractor Action

Last synced: 09 Mar 2026

https://github.com/advanced-security/reusable-workflows

Advanced Security Reusable GitHub Actions Workflows

Last synced: 28 Jul 2025

https://github.com/advanced-security/slack-secret-scanning-notifier-azure-function

Slack notifier for Secret Scanning alerts from GitHub Advanced Security, using a GitHub App and Azure Function

github-advanced-security secret-scanning slack-bot

Last synced: 04 Aug 2025

https://github.com/advanced-security/gh-ghas-audit

GitHub CLI extension to audit GHAS and code scanning setup for one or more organizations and repositories.

Last synced: 22 Jul 2025

https://github.com/advanced-security/mrva-report-docs

Documentation for the MRVA reporting pipeline - architecture, CLI reference, and developer guide for transforming CodeQL multi-repository variant analysis results into interactive reports.

Last synced: 28 Jul 2026

https://github.com/advanced-security/delombok

Delombok Java Code for analysis with Code Scanning

Last synced: 28 Apr 2025

https://github.com/advanced-security/crypto-bill-of-materials-data

Generate a Crypto Bill of Materials using CodeQL

Last synced: 10 Jul 2025

https://github.com/advanced-security/ghas-mttr

GitHub Advanced Security Mean Time to Remediate (MTTR)

Last synced: 04 Apr 2025

https://github.com/advanced-security/secret-scanning-tools

Testing Suite for GitHub Secret Scanning Custom Patterns

github-advanced-security secret-scanning

Last synced: 28 Apr 2025

https://github.com/advanced-security/conda-dependency-submission-action

GitHub Action that scans Conda manifest files and submits their dependencies to GitHub's Dependency Graph,

conda dependabot dependency-graph dependency-graph-api

Last synced: 18 Jun 2026

https://github.com/advanced-security/validate-secrets

Extensible secret validation tool for GitHub Secret Scanning and beyond.

Last synced: 22 Jul 2025

https://github.com/advanced-security/mrva-reports

A Blazor WebAssembly app for visualizing GitHub CodeQL Multi-Repository Variant Analysis (MRVA) results

Last synced: 28 Jul 2026

https://github.com/advanced-security/secret-scanning-notifications

A GitHub Action that sends email notifications to security manager team for any new or resolved secret scanning alerts based on a set frequency

Last synced: 10 Aug 2026

https://github.com/advanced-security/flake8-sarif-formatter

Format Flake8 results as SARIF for input to SAST tools such as GitHub Code Scanning

Last synced: 07 Oct 2025

https://github.com/advanced-security/ghas-bootcamp-query

Example custom query used to demo CodeQL

Last synced: 03 Mar 2026

https://github.com/advanced-security/policy-as-code-testing

Policy as Code Testing Repository

Last synced: 03 Jun 2026

https://github.com/advanced-security/python-lint-code-scanning-action

Lint and type check Python with your choice of popular linters, and upload results to GitHub Code Scanning

Last synced: 28 Apr 2025

https://github.com/advanced-security/.github

GitHub Advanced Security's Org README

Last synced: 07 Feb 2026

https://github.com/advanced-security/conan-dependency-submission

Conan Dependency Submission to GitHub

Last synced: 05 Jun 2026

https://github.com/advanced-security/alert-suppression-queries

CodeQL packs for alert suppression queries for each supported code scanning language

Last synced: 19 Mar 2026