fossas / fossa-actionLinks
Find license compliance and security issues in your applications with FOSSA and GitHub Actions.
☆61Updated this week
Alternatives and similar repositories for fossa-action
Users that are interested in fossa-action are comparing it to the libraries listed below
Sorting:
- A GitHub Action used for publishing an Action to ghcr.io as an OCI container.☆111Updated 4 months ago
- GitHub Action to expose GitHub runtime to the workflow☆83Updated 2 weeks ago
- Run multiple open source security static analysis tools without the added complexity with OSSAR (Open Source Static Analysis Runner).☆98Updated last month
- An Action for printing OIDC claims in GitHub Actions.☆116Updated 2 months ago
- ☆55Updated 2 weeks ago
- Reusable workflows for developing actions☆74Updated 2 weeks ago
- GitHub Action to enable automated security updates and open a issue/PR in repos in an org that have dependency files but no dependabot.ya…☆217Updated last week
- ☆16Updated 10 months ago
- GitHub Action that given an organization or repository, produces information about the contributors over the specified time period.☆132Updated this week
- A GitHub Action to suggest removal of non-organization members from CODEOWNERS files☆135Updated last week
- Runner Container Hooks for GitHub Actions☆120Updated this week
- Octokit plugin for GitHub’s recommended request retries☆46Updated this week
- A Github Action to ensure that actions are pinned to full length commit SHAs☆47Updated last week
- Proof-of-concept SLSA provenance generator for GitHub Actions☆100Updated 3 years ago
- JavaScript code and supporting files for working with the 'Static Analysis Results Interchange Format' (SARIF, see https://github.com/oas…☆30Updated last year
- Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alerts☆40Updated 3 weeks ago
- Official GitHub Action for OpenSSF Scorecard.☆339Updated this week
- VSCode extension to integrate hadolint, a Dockerfile linter, into VSCode☆83Updated 2 years ago
- Find stale repositories in a GitHub organization.☆190Updated last week
- GitHub Action to check PRs for signed commits☆58Updated last year
- Probot & GitHub Action example☆34Updated 2 weeks ago
- Action for generating attestations for workflow artifacts☆61Updated last week
- Template repo for creating container actions using https://github.com/actions/toolkit/☆153Updated last week
- Publish a signed build provenance from your GitHub Actions workflow☆63Updated last year
- Orchestrate GitHub Actions Security☆301Updated last week
- Action for generating SBOM attestations for workflow artifacts☆41Updated last week
- A GitHub action to enable auto-merge on a pull request☆130Updated 2 weeks ago
- GitHub token permissions Monitor and Advisor actions☆345Updated 2 weeks ago
- Generate SBOMs with gh CLI☆195Updated 6 months ago
- A Pulumi package to facilitate interacting with GitHub☆65Updated this week