ossf / scorecard-action

Related projects ⓘ

Alternatives and complementary repositories for scorecard-action

• step-security / secure-repo
  Orchestrate GitHub Actions Security
  ☆256Updated 2 months ago
• github / evergreen
  GitHub Action to enable automated security updates and open a issue/PR in repos in an org that have dependency files but no dependabot.ya…
  ☆186Updated this week
• advanced-security / policy-as-code
  GitHub Advanced Security Policy as Code
  ☆72Updated this week
• anchore / sbom-action
  GitHub Action for creating software bill of materials using Syft.
  ☆167Updated 2 weeks ago
• github / cleanowners
  A GitHub Action to suggest removal of non-organization members from CODEOWNERS files
  ☆117Updated this week
• GitHubSecurityLab / actions-permissions
  GitHub token permissions Monitor and Advisor actions
  ☆257Updated this week
• zkoppert / advanced-security-enforcer
  A GitHub action for organizations that enables advanced security code scanning on all new repos
  ☆37Updated 9 months ago
• slsa-framework / slsa-github-generator
  Language-agnostic SLSA provenance generation for Github Actions
  ☆432Updated this week
• GeekMasher / advanced-security-compliance
  GitHub Advance Security Compliance Action
  ☆132Updated last year
• github / stale-repos
  Find stale repositories in a GitHub organization.
  ☆143Updated this week
• advanced-security / gh-sbom
  Generate SBOMs with gh CLI
  ☆166Updated 2 months ago
• step-security / harden-runner
  Network egress filtering and runtime security for GitHub-hosted and self-hosted runners
  ☆621Updated this week
• peter-murray / github-security-report-action
  ☆78Updated 6 months ago
• actions / dependency-review-action
  A GitHub Action for detecting vulnerable dependencies and invalid licenses in your PRs
  ☆609Updated this week
• github / ghas-jira-integration
  Synchronize GitHub Code Scanning alerts to Jira issues
  ☆81Updated last month
• advanced-security / secret-scanning-custom-patterns
  Examples of Custom Secret Scanning Patterns
  ☆144Updated 4 months ago
• anchore / scan-action
  Anchore container analysis and scan provided as a GitHub Action
  ☆215Updated this week
• jhutchings1 / Create-ActionsPRs
  This repository creates pull requests to push a GitHub Actions workflow to a collection of workflows.
  ☆44Updated last year
• slsa-framework / slsa-verifier
  Verify provenance from SLSA compliant builders
  ☆230Updated 3 weeks ago
• peter-murray / workflow-application-token-action
  GitHub Action that will get a scoped short lived token for Actions workflows using a GitHub Application.
  ☆176Updated last month
• github / contributors
  GitHub Action that given an organization or repository, produces information about the contributors over the specified time period.
  ☆102Updated this week
• github / actions-oidc-gateway-example
  Example of using Actions OIDC token to proxy into a private network
  ☆91Updated last week
• NickLiffen / ghas-enablement
  A tool that aims to bulk automates the enablement of GitHub Code Scanning, Secret Scanning and Dependabot across multiple repositories.
  ☆152Updated 5 months ago
• github-community-projects / private-mirrors
  A GitHub App that allows you to contribute upstream using private mirrors of public projects
  ☆146Updated this week
• github / ruleset-recipes
  Quickstart your use of Repository Rules with prebuilt rulesets ready to import.
  ☆175Updated 4 months ago
• advanced-security / ghas-reviewer-app
  GitHub Advanced Security Pull Request Security Team required review GitHub App
  ☆34Updated this week
• SvanBoxel / organization-workflows
  Need to centrally manage and run Actions workflows across multiple repositories? This app does it for you.
  ☆133Updated 6 months ago
• snyk / parlay
  Enrich SBOMs with data from third party services
  ☆117Updated 2 weeks ago
• renovatebot / github-action
  ☆293Updated this week
• advanced-security / ghas-to-csv
  Play with GHAS API to provide posture data over time
  ☆33Updated 2 weeks ago