Repositories list

• cbom-action

  Public
  Create a Crypto Bill of Materials using CodeQL

  Python

  •

  MIT License

  •13•9•0•2•Updated Jun 10, 2025Jun 10, 2025

• conan-dependency-submission

  Public
  Conan Dependency Submission to GitHub

  Python

  •

  MIT License

  •1•0•3•1•Updated Jun 10, 2025Jun 10, 2025

• ghas-to-csv

  Public
  Play with GHAS API to provide posture data over time

  github-advanced-securitycsvgithub-actions

  Python

  •

  MIT License

  •16•36•3•1•Updated Jun 9, 2025Jun 9, 2025

• generate-sbom-action

  Public
  An Action to wrap creating an SBOM via REST API

  TypeScript

  •

  MIT License

  •4•18•0•6•Updated Jun 9, 2025Jun 9, 2025

• codeql-sap-js

  Public
  CodeQL models for SAP JavaScript frameworks CAP, UI5 and XSJS

  CodeQL

  •

  MIT License

  •2•6•4•4•Updated Jun 9, 2025Jun 9, 2025

• advanced-security-material

  Public
  code-scanningcodeqladvanced-security+ 2advanced-security-trainingsecurity

  Shell

  •26•72•0•2•Updated Jun 9, 2025Jun 9, 2025

• reusable-workflows

  Public
  Advanced Security Reusable GitHub Actions Workflows

  MIT License

  •5•3•4•4•Updated Jun 9, 2025Jun 9, 2025

• codeql-summarize

  Public
  CodeQL Summary Generator

  Python

  •

  MIT License

  •2•7•2•1•Updated Jun 9, 2025Jun 9, 2025

• codeql-extractor-iac

  Public
  CodeQL Extractor, Library, and Queries for Infrastructure as Code

  CodeQL

  •

  MIT License

  •6•50•16•2•Updated Jun 9, 2025Jun 9, 2025

• codeql-extractor-action

  Public
  CodeQL Extractor Action

  Rust

  •

  MIT License

  •0•2•0•0•Updated Jun 6, 2025Jun 6, 2025

• dismiss-alerts

  Public
  Java

  •

  MIT License

  •3•15•2•5•Updated Jun 6, 2025Jun 6, 2025

• secret-scanning-notifications

  Public
  A GitHub Action that sends email notifications to security manager team for any new or resolved secret scanning alerts based on a set frequency

  TypeScript

  •

  MIT License

  •3•1•0•7•Updated Jun 6, 2025Jun 6, 2025

• sample-javascript-monorepo

  Public
  TypeScript

  •

  MIT License

  •0•0•0•5•Updated Jun 6, 2025Jun 6, 2025

• awesome-dependabot

  Public
  A curated list of awesome Dependabot (and related software supply chain) resources.

  awesomeawesome-list

  MIT License

  •2•5•0•1•Updated Jun 4, 2025Jun 4, 2025

• qlsh

  Public
  qlsh - a CodeQL REPL/shell for running interactive queries against a CodeQL database

  Shell

  •

  MIT License

  •0•5•0•0•Updated Jun 3, 2025Jun 3, 2025

• maven-dependency-submission-action

  Public
  GitHub Action for submitting Maven dependencies

  TypeScript

  •

  MIT License

  •28•52•14•2•Updated Jun 3, 2025Jun 3, 2025

• gh-add-files

  Public
  A GitHub CLI Extension that allows you to add files to your GitHub repositories directly from the command line

  gh-extension

  Go

  •

  MIT License

  •1•6•0•0•Updated Jun 3, 2025Jun 3, 2025

• SARIF-viewer

  Public
  JetBrains IDE plugin for displaying SARIF from GHAS or from a local file

  Kotlin

  •

  MIT License

  •4•9•3•3•Updated Jun 2, 2025Jun 2, 2025

• component-detection-dependency-submission-action

  Public
  TypeScript

  •

  MIT License

  •8•17•3•2•Updated Jun 2, 2025Jun 2, 2025

• python-lint-code-scanning-action

  Public
  Lint and type check Python with your choice of popular linters, and upload results to GitHub Code Scanning

  Python

  •

  MIT License

  •3•3•3•0•Updated Jun 2, 2025Jun 2, 2025

• codeql-sarif-security-standard-annotator

  Public
  Compare a CodeQL SARIF results file to a security standard CWE list and annotate the SARIF rules with a tag to highlight results applicable to the security standard

  TypeScript

  •

  MIT License

  •1•9•1•11•Updated Jun 2, 2025Jun 2, 2025

• monorepo-code-scanning-action

  Public
  Focus SAST scans (with CodeQL) on just the changed parts of your monorepo, split up as you define

  actionsmonoreposast+ 3codeqladvanced-securitycode-scanning-ready

  JavaScript

  •

  MIT License

  •2•6•11•0•Updated Jun 2, 2025Jun 2, 2025

• conda-dependency-submission-action

  Public
  TypeScript

  •

  MIT License

  •3•0•0•5•Updated Jun 2, 2025Jun 2, 2025

• secret-scanning-tools

  Public
  Testing Suite for GitHub Secret Scanning Custom Patterns

  secret-scanninggithub-advanced-security

  Python

  •

  MIT License

  •2•7•0•7•Updated Jun 2, 2025Jun 2, 2025

• gh-sbom

  Public
  Generate SBOMs with gh CLI

  gh-extension

  Go

  •

  MIT License

  •14•186•13•0•Updated May 30, 2025May 30, 2025

• gh-ghas-audit

  Public
  GitHub CLI extension to audit GHAS and code scanning setup for one or more organizations and repositories.

  Go

  •

  MIT License

  •0•3•0•0•Updated May 30, 2025May 30, 2025

• crypto-bill-of-materials-data

  Public
  Generate a Crypto Bill of Materials using CodeQL

  TypeScript

  •

  MIT License

  •3•1•0•0•Updated May 30, 2025May 30, 2025

• slack-secret-scanning-notifier-azure-function

  Public
  Slack notifier for Secret Scanning alerts from GitHub Advanced Security, using a GitHub App and Azure Function

  slack-botsecret-scanninggithub-advanced-security

  TypeScript

  •

  MIT License

  •2•2•3•0•Updated May 30, 2025May 30, 2025

• teams-secret-scanning-notifier-azure-function

  Public
  Microsoft Teams notifier for Secret Scanning alerts from GitHub Advanced Security, using a GitHub App and Azure Function

  github-appsecurity-teamazure-function+ 3secret-scanninggithub-advanced-securitymicrosoft-teams-bot

  TypeScript

  •

  MIT License

  •1•6•1•0•Updated May 30, 2025May 30, 2025

• ghas-seat-projection

  Public
  GitHub Action to get information of assess how many seats enablement of GHAS will consume when enabled on a repository

  JavaScript

  •

  MIT License

  •1•2•3•0•Updated May 27, 2025May 27, 2025