Alternatives and similar repositories for action-baseline

Users that are interested in action-baseline are comparing it to the libraries listed below

• zaproxy / action-full-scan
  A GitHub Action for running the ZAP Full scan
  ☆335Updated 3 months ago
• zaproxy / action-api-scan
  A GitHub Action for running the ZAP API scan
  ☆65Updated 3 months ago
• snyk / actions
  A set of GitHub actions for checking your projects for vulnerabilities.
  ☆597Updated last week
• GeekMasher / advanced-security-compliance
  GitHub Advance Security Compliance Action
  ☆134Updated 2 years ago
• checkmarx-ts / checkmarx-cxflow-github-action
  Checkmarx CxFlow GitHub Action with SARIF output
  ☆54Updated 5 months ago
• anchore / scan-action
  Anchore container analysis and scan provided as a GitHub Action
  ☆256Updated last week
• snyk-labs / snyk-cicd-integration-examples
  Examples of integrating the Snyk CLI into a CI/CD system
  ☆99Updated 10 months ago
• advanced-security / secret-scanning-custom-patterns
  Examples of Custom Secret Scanning Patterns
  ☆165Updated last week
• NickLiffen / ghas-enablement
  A tool that aims to bulk automates the enablement of GitHub Code Scanning, Secret Scanning and Dependabot across multiple repositories.
  ☆157Updated last year
• advanced-security / policy-as-code
  GitHub Advanced Security Policy as Code
  ☆89Updated last month
• Azure / container-scan
  A GitHub action to help you scan your docker image for vulnerabilities
  ☆222Updated 2 years ago
• devsecopsmaturitymodel / DevSecOps-MaturityModel
  ☆540Updated 2 weeks ago
• advanced-security / GSSAR
  GitHub Secret Scanning Auto Remediator (GSSAR)
  ☆46Updated 2 months ago
• dependency-check / Dependency-Check_Action
  Github action to run dependency check
  ☆84Updated 4 months ago
• jhutchings1 / Create-ActionsPRs
  This repository creates pull requests to push a GitHub Actions workflow to a collection of workflows.
  ☆47Updated 2 years ago
• AppSecure-nrw / security-belts
  ☆111Updated last year
• CycloneDX / cyclonedx-node-module
  creates CycloneDX Software-Bill-of-Materials (SBOM) from node-based projects
  ☆134Updated last month
• OWASP / www-project-application-security-verification-standard
  OWASP Foundation Web Respository
  ☆81Updated last week
• Quobis / action-owasp-dependecy-track-check
  Github action to generate BoM and upload to OWASP dependency track for vulnerability analysis
  ☆47Updated last year
• gitleaks / gitleaks-action
  Protect your secrets using Gitleaks-Action
  ☆452Updated 3 months ago
• snyk / snyk-api-import
  ⚡️Snyk API powered import tool to help you automate & monitor a large scale import into Snyk organizations. Designed for onboarding with …
  ☆42Updated last week
• ossf / scorecard-action
  Official GitHub Action for OpenSSF Scorecard.
  ☆338Updated this week
• github / ghas-jira-integration
  Synchronize GitHub Code Scanning alerts to Jira issues
  ☆93Updated last week
• semgrep / semgrep-action
  This project is deprecated. Use https://github.com/returntocorp/semgrep instead
  ☆74Updated last year
• stackhawk / hawkscan-action
  🦅 Run a StackHawk scan in GitHub Actions
  ☆27Updated 3 months ago
• OWASP / Software-Component-Verification-Standard
  Software Component Verification Standard (SCVS)
  ☆150Updated 6 months ago
• aquasecurity / trivy-action
  Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities
  ☆1,080Updated last month
• ShiftLeftSecurity / sast-scan
  Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…
  ☆854Updated 2 years ago
• peter-murray / github-security-report-action
  ☆81Updated last year
• step-security / harden-runner
  Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, an…
  ☆893Updated this week