Security

Fortify ScanCentral Scan

By fortify

Build secure software fast with Fortify SAST scans

WhiteSource Bolt

Detect open source vulnerabilities in real time with suggested fixes for quick remediation

Snyk

By snyk

Check your applications for vulnerabilties using Snyk

Checkov Github Action

By bridgecrewio

Run Checkov against Terraform/CloudFormation infrastructure code, as a pre-packaged Github Action

DefenseCode ThunderScan Action

By defensecode

Source code scanning for vulnerabilities using DefenseCode ThunderScan SAST solution

Aqua Security Trivy

By aquasecurity

Scans container images for vulnerabilities with Trivy

Checkmarx CxFlow Action

By checkmarx-ts

Simplify Checkmarx Scanning of source code along with Result consumption leveraging Checkmarx CxFlow solution

Generate SARIF from Fortify on Demand

By fortify

Generate SARIF file from Fortify on Demand SAST results for import to GitHub

Synopsys Intelligent Security Scan

By synopsys-sig

Initiate optimized SAST/SCA scans based on code changes and policy with filtered results for display in GitHub

Xanitizer Security Analysis

By RIGS-IT

GitHub action to download and install Xanitizer, and to run a Xanitizer security analysis in a GitHub workflow

Bridgecrew Github Action

By bridgecrewio

Find and fix security and compliance issues in infrastructure code using Bridgecrew Action

Vault Secrets

By hashicorp

A Github Action that allows you to consume HashiCorp Vault™ secrets as secure environment variables

Refactr - Run Pipeline

By refactr

Runs a pipeline in the Refactr Platform

BackHub

Reliable GitHub repository backup, set up in minutes

Secrets Sync Action

By google

Copies secrets from the action's environment to many other repos

DevSkim

By microsoft

Run DevSkim Code Analysis

Sonatype DepShield

Monitor your open source components for security vulnerabilities - goodbye muda, hello kaizen

OWASP ZAP Full Scan

By zaproxy

Scans the web application with the OWASP ZAP Full Scan

Veracode Static Analysis Pipeline Scan and SARIF import

By veracode

Initiate a Veracode Static Analysis Pipeline Scan and convert the results file to a valid SARIF file

Veracode Upload And Scan

By veracode

Upload files to veracode and start a static scan