oxsecurity / megalinter
🦙 MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository sources with a GitHub Action, other CI tools or locally.
☆2,091Updated this week
Alternatives and similar repositories for megalinter:
Users that are interested in megalinter are comparing it to the libraries listed below
- Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastruct…☆2,259Updated this week
- GitHub App to set and enforce security policies☆1,293Updated this week
- Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities☆917Updated this week
- automated releases based on conventional commits☆1,886Updated 3 weeks ago
- A curated list of awesome self-hosted GitHub Action runners in a large comparison matrix☆772Updated last month
- Code signing and transparency for containers and binaries☆4,821Updated this week
- A linter for YAML files.☆3,013Updated last week
- Actions for running CodeQL analysis☆1,235Updated this week
- Update multiple repositories in with one command☆976Updated last month
- A set of GitHub actions for checking your projects for vulnerabilities☆545Updated 6 months ago
- CLI tool and library for generating a Software Bill of Materials from container images and filesystems☆6,761Updated this week
- Static checker for GitHub Actions workflow files☆3,059Updated 2 months ago
- Policy enforcement for your pipelines.☆463Updated this week
- OpenSSF Scorecard - Security health metrics for Open Source☆4,830Updated last week
- An action for automatically labelling pull requests☆2,102Updated last week
- Kubernetes controller for GitHub Actions self-hosted runners☆5,071Updated last week
- Pull Requests for GitHub repository settings☆971Updated this week
- Protect your secrets using Gitleaks-Action☆380Updated 5 months ago
- Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supp…☆2,956Updated this week
- A tool for securing CI/CD workflows with version pinning.☆814Updated this week
- A GitHub Action for detecting vulnerable dependencies and invalid licenses in your PRs☆663Updated 3 weeks ago
- Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start☆2,859Updated 2 months ago
- Supply-chain Levels for Software Artifacts☆1,633Updated this week
- A flexible JSON/YAML linter for creating automated style guides, with baked in support for OpenAPI (v3.1, v3.0, and v2.0), Arazzo v1.0, a…☆2,674Updated this week
- Drafts your next release notes as pull requests are merged into master.☆3,554Updated 2 months ago
- A vulnerability scanner for container images and filesystems☆9,608Updated this week
- Interactive Terraform visualization. State and configuration explorer.☆3,112Updated 8 months ago
- ☆687Updated last week
- validate the structure of your container images☆2,371Updated 2 weeks ago
- A collection of JSON schema files including full API☆3,300Updated this week