A tool that aims to bulk automates the enablement of GitHub Code Scanning, Secret Scanning and Dependabot across multiple repositories.

GitHub Advance Security Compliance Action

A demonstration Probot app that adds visibility to code scanning alerts

This repo demonstrates how to use the GitHub Secret Scanning API to export all the alerts in an organization to a CSV file

Get Dependabot Alerts from a repo

This repo demonstrates how to use the GitHub Code Scanning API to export all the alerts in an organization to a CSV file

Synchronize GitHub Code Scanning alerts to Jira issues

GitHub Code Scanning Mean Time to Remediate (GCSMTTR)

GitHub Secret Scanning Auto Remediator (GSSAR)

A solution which drops GitHub Code Scanning Results from Repositories to Slack Channels.

Play with GHAS API to provide posture data over time

Calculates dependencies for a Gradle build-target and submits the list to the Dependency Submission API

GitHub Advanced Security Pull Request Security Team required review GitHub App

GitHub Action that creates a Azure DevOps work item when an Issue is created

A GitHub CLI extension for GitHub Code-Scanning!

GitHub Action for submitting Maven dependencies

This repository contains pipeline files for various CI/CD systems, illustrating how to integrate the CodeQL CLI Bundle for Automated Code Scanning

GitHub Advanced Security Policy as Code

GitHub Action for filtering Code Scanning alerts by path and id

Integrate CodeQL into CI/CD pipelines, using the CodeQL CLI Bundle for Automated Code Scanning