blackduck-inc / intelligent-security-scanLinks
Initiate optimized SAST/SCA scans based on code changes and policy with filtered results converted to SARIF for display in GitHub.
☆1Updated 7 months ago
Alternatives and similar repositories for intelligent-security-scan
Users that are interested in intelligent-security-scan are comparing it to the libraries listed below
Sorting:
- GitHub action to download and install Xanitizer, and to run a Xanitizer security analysis in a GitHub workflow.☆10Updated 4 years ago
- Run multiple open source security static analysis tools without the added complexity with OSSAR (Open Source Static Analysis Runner).☆97Updated last year
- Collect, curate, and communicate relevant security metrics for open source projects.☆63Updated last year
- ☆34Updated last week
- Sample code snippets for consuming the CloudSploit API☆13Updated last year
- ☆28Updated last month
- GitHub Secret Scanning Auto Remediator (GSSAR)☆45Updated last month
- This repository contains a sample script which can be used to enable security vulnerability alerts in all of the repositories in a given …☆80Updated 9 months ago
- Source for official CVE Program policy documents.☆16Updated 2 months ago
- The Auditree data gathering and reporting tool.☆15Updated 10 months ago
- Awesome Snyk community contributions, champions, integrations, blogs, tools and more 💜☆47Updated 3 years ago
- Synchronize GitHub Code Scanning alerts to Jira issues☆89Updated 3 weeks ago
- Terraform modules for CloudSploit Scanner☆14Updated 3 years ago
- ☆27Updated last year
- Action to detect if a secret is initially detected in a pull request☆17Updated 3 weeks ago
- Prevent leaks with gitleaks, and use tests to validate☆32Updated last month
- GitHub action to run Threagile, the agile threat modeling toolkit, on a repo's threagile.yaml file☆13Updated last year
- Github action to benchmark dockerfiles in github repository.☆12Updated 2 years ago
- ☆30Updated this week
- Deprecated; please use https://github.com/marketplace/actions/fortify-ast-scan instead☆13Updated last year
- Cost-Optimization, Backup & Security Alerting for the AWS Cloud with Terraform templates living in your repository☆17Updated 5 years ago
- Publishes BOMs to Dependency-Track from GitHub Actions☆54Updated 9 months ago
- Continuous Compliance makes it possible to enforce company policy on repositories. Continuous Compliance will automatically check your re…☆22Updated last year
- ☆72Updated last month
- ☆51Updated 5 months ago
- The Auditree tool for adding external evidence.☆11Updated 10 months ago
- AWS container security survey 2020☆11Updated 4 years ago
- Compare vulnerability scanners results (to make them better!)☆22Updated 3 weeks ago
- ☆80Updated last year
- OWASP Foundation Web Respository☆28Updated 10 months ago