Repositories list

• SARIF-viewer

  Public
  JetBrains IDE plugin for displaying SARIF from GHAS or from a local file

  Kotlin

  •

  MIT License

  •2•8•3•3•Updated Jan 10, 2025Jan 10, 2025

• ghas-to-csv

  Public
  Play with GHAS API to provide posture data over time

  github-advanced-securitycsvgithub-actions

  Python

  •

  MIT License

  •16•34•3•0•Updated Jan 10, 2025Jan 10, 2025

• policy-as-code

  Public
  GitHub Advanced Security Policy as Code

  Python

  •

  MIT License

  •16•75•12•2•Updated Jan 10, 2025Jan 10, 2025

• reusable-workflows

  Public
  Advanced Security Reusable GitHub Actions Workflows

  MIT License

  •2•1•4•2•Updated Jan 10, 2025Jan 10, 2025

• codeql-extractor-iac

  Public
  CodeQL Extractor, Library, and Queries for Infrastructure as Code

  CodeQL

  •

  MIT License

  •5•44•16•2•Updated Jan 10, 2025Jan 10, 2025

• sample-javascript-monorepo

  Public
  TypeScript

  •

  MIT License

  •0•0•0•2•Updated Jan 10, 2025Jan 10, 2025

• ghas-reviewer-app

  Public
  GitHub Advanced Security Pull Request Security Team required review GitHub App

  github-appadvanced-security

  Python

  •

  MIT License

  •9•34•5•1•Updated Jan 8, 2025Jan 8, 2025

• advanced-security-material

  Public
  code-scanningcodeqladvanced-security+ 2advanced-security-trainingsecurity

  Shell

  •24•70•0•2•Updated Jan 8, 2025Jan 8, 2025

• codeql-sap-js

  Public
  CodeQL models for SAP JavaScript frameworks CAP, UI5 and XSJS

  CodeQL

  •

  MIT License

  •0•3•4•3•Updated Jan 7, 2025Jan 7, 2025

• component-detection-dependency-submission-action

  Public
  TypeScript

  •

  MIT License

  •5•12•7•5•Updated Jan 6, 2025Jan 6, 2025

• codeql-summarize

  Public
  CodeQL Summary Generator

  Python

  •

  MIT License

  •2•7•2•1•Updated Dec 24, 2024Dec 24, 2024

• secret-scanning-review-action

  Public
  Action to detect if a secret is initially detected in a pull request

  Python

  •

  MIT License

  •3•12•5•2•Updated Dec 23, 2024Dec 23, 2024

• slack-secret-scanning-notifier-azure-function

  Public
  Slack notifier for Secret Scanning alerts from GitHub Advanced Security, using a GitHub App and Azure Function

  slack-botsecret-scanninggithub-advanced-security

  TypeScript

  •

  MIT License

  •2•2•3•0•Updated Dec 18, 2024Dec 18, 2024

• teams-secret-scanning-notifier-azure-function

  Public
  Microsoft Teams notifier for Secret Scanning alerts from GitHub Advanced Security, using a GitHub App and Azure Function

  github-appsecurity-teamazure-function+ 3secret-scanninggithub-advanced-securitymicrosoft-teams-bot

  TypeScript

  •

  MIT License

  •1•5•1•0•Updated Dec 18, 2024Dec 18, 2024

• awesome-codeql

  Public
  A curated list of awesome CodeQL resources.

  awesomeawesome-list

  MIT License

  •2•28•0•0•Updated Dec 16, 2024Dec 16, 2024

• dismiss-alerts

  Public
  Java

  •

  MIT License

  •3•14•3•8•Updated Dec 9, 2024Dec 9, 2024

• gh-add-files

  Public
  A GitHub CLI Extension that allows you to add files to your GitHub repositories directly from the command line

  gh-extension

  Go

  •

  MIT License

  •1•4•0•1•Updated Nov 27, 2024Nov 27, 2024

• cocoapods-dependency-submission-action

  Public
  CocoaPods Lockfile Dependency Submission Action

  Python

  •

  MIT License

  •3•5•2•0•Updated Nov 26, 2024Nov 26, 2024

• brew-dependency-submission-action

  Public
  Brew Lockfile Dependency Submission Action

  homebrewbrewactions

  Python

  •

  MIT License

  •4•3•1•3•Updated Nov 25, 2024Nov 25, 2024

• monorepo-code-scanning-action

  Public
  Focus SAST scans (with CodeQL) on just the changed parts of your monorepo, split up as you define

  actionsmonoreposast+ 3codeqladvanced-securitycode-scanning-ready

  JavaScript

  •

  MIT License

  •0•6•1•0•Updated Nov 22, 2024Nov 22, 2024

• codeql-sarif-security-standard-annotator

  Public
  Compare a CodeQL SARIF results file to a security standard CWE list and annotate the SARIF rules with a tag to highlight results applicable to the security standard

  TypeScript

  •

  MIT License

  •1•7•1•14•Updated Nov 21, 2024Nov 21, 2024

• spdx-dependency-submission-action

  Public
  JavaScript

  •

  MIT License

  •3•12•2•6•Updated Nov 18, 2024Nov 18, 2024

• qlsh

  Public
  qlsh - a CodeQL REPL/shell for running interactive queries against a CodeQL database

  Shell

  •

  MIT License

  •0•3•1•0•Updated Nov 14, 2024Nov 14, 2024

• remap-sarif

  Public
  Remap a SARIF file with sourcemaps

  Python

  •

  MIT License

  •5•3•3•0•Updated Nov 6, 2024Nov 6, 2024

• conan-dependency-submission

  Public
  Conan Dependency Submission to GitHub

  Python

  •

  MIT License

  •1•0•2•0•Updated Nov 6, 2024Nov 6, 2024

• probot-security-alerts

  Public
  Sample GitHub App which monitors and enforces rules for code scanning, Dependabot, and secret scanning alerts

  nodejsprobotsample+ 4securitytypescriptsecurity-alertsghas

  TypeScript

  •

  MIT License

  •11•22•8•8•Updated Nov 1, 2024Nov 1, 2024

• python-lint-code-scanning-action

  Public
  Lint and type check Python with your choice of popular linters, and upload results to GitHub Code Scanning

  Python

  •

  MIT License

  •3•0•2•1•Updated Oct 31, 2024Oct 31, 2024

• spotbugs-findsecbugs-action

  Public
  Run SpotBugs with FindSecBugs on Java and other JVM languages (e.g. Scala), and upload the results to GitHub Code Scanning

  MIT License

  •5•5•1•0•Updated Oct 18, 2024Oct 18, 2024

• set-codeql-language-matrix

  Public
  Automatically set the CodeQL matrix job using the languages in your repository.

  codeql

  Python

  •

  MIT License

  •7•11•1•0•Updated Oct 17, 2024Oct 17, 2024

• filter-sarif

  Public
  GitHub Action for filtering Code Scanning alerts by path and id

  sarifcode-scanninggithub-advanced-security

  Java

  •

  Apache License 2.0

  •8•22•2•1•Updated Oct 16, 2024Oct 16, 2024