TruffleHog OSS

By trufflesecurity

Creator verified by GitHub

Scan Github Actions with TruffleHog

14k stars

MegaLinter

By oxsecurity

Creator verified by GitHub

Combine all available linters to automatically validate your sources without configuration

1.8k stars

Authenticate to Google Cloud

By google-github-actions

Creator verified by GitHub

Authenticate to Google Cloud from GitHub Actions via Workload Identity Federation or service account keys

838 stars

Legitify Analyze

By Legit-Labs

Creator verified by GitHub

Legitify GitHub Action

715 stars

Aqua Security Trivy

By aquasecurity

Creator verified by GitHub

Scans container images for vulnerabilities with Trivy

698 stars

SonarCloud Scan

By SonarSource

Creator verified by GitHub

Scan your code with SonarCloud to detect bugs, vulnerabilities and code smells in 26+ programming languages.

572 stars

Dependency Review

By actions

Creator verified by GitHub

Prevent the introduction of dependencies with known vulnerabilities

544 stars

mobsfscan

By MobSF

Creator verified by GitHub

mobsfscan is a SAST that can find insecure code patterns in your Android and iOS source code

541 stars

Harden-Runner

By step-security

Creator verified by GitHub

Harden-Runner provides runtime security for GitHub-hosted and self-hosted runners

531 stars

Snyk

By snyk

Creator verified by GitHub

Check your applications for vulnerabilties using Snyk

478 stars

HashiCorp Vault

By hashicorp

Creator verified by GitHub

A Github Action that allows you to consume HashiCorp Vault™ secrets as secure environment variables

419 stars

GitGuardian Shield Action

By GitGuardian

Creator verified by GitHub

Scan commits for secrets and other issues

322 stars

ZAP Baseline Scan

By zaproxy

Creator verified by GitHub

Scans the web application with the ZAP Baseline Scan

293 stars

Frogbot by JFrog

By jfrog

Creator verified by GitHub

JFrog Frogbot is a Git bot that scans your pull requests and repositories for security vulnerabilities

283 stars

Wait for secrets

By step-security

Creator verified by GitHub

Publish from GitHub Actions using multi-factor authentication

273 stars

Create GitHub App Token

By actions

Creator verified by GitHub

GitHub Action for creating a GitHub App installation access token

265 stars

ZAP Full Scan

By zaproxy

Creator verified by GitHub

Scans the web application with the ZAP Full Scan

257 stars

Gradle Wrapper Validation

By gradle

Creator verified by GitHub

Validates Gradle Wrapper JAR Files

255 stars

Qodana Scan

By JetBrains

Creator verified by GitHub

Scan your projects with Qodana on GitHub. Docs: https://jb.gg/qodana-github-action

248 stars

Renovate Bot GitHub Action

By renovatebot

Creator verified by GitHub

GitHub Action to run self-hosted Renovate

239 stars