Skip to content
@advanced-security

GitHub Advanced Security

Home of Advanced Security solutions that we can share with the world
README.md

Welcome to the GitHub Advanced Security Organisation! 👋

This organisation contains open source initiatives created by developers at GitHub (and around the world) to show the art of the possible with advanced security. :octocat: 💻

GitHub Advanced Security consists of CodeQL, Code Scanning, Secret Scanning, Security Overview and Dependency Review. A core principle of each of these solutions is being automated and integrable via API's and Webhooks. In this organisation, you will find starter kits, actions, custom queries and bundles, scripts and full-blown solutions that show off how you can integrate into GitHub Advanced Security (GHAS).

In comparison to the official GitHub organisation, a lot of the software you find here is developed as a best effort. These are open-source solutions developed outside of core responsibilities but with the aim for you to leverage and consume as you would any standard open-source software. 👐

We love contributions and feedback from you! So please feel free to open pull requests and issues as you can! 💕

Welcome and we hope what you find here useful 🙇

Pinned Loading

  1. secret-scanning-custom-patterns secret-scanning-custom-patterns Public

    Examples of Custom Secret Scanning Patterns

    HTML 132 21

  2. maven-dependency-submission-action maven-dependency-submission-action Public

    GitHub Action for submitting Maven dependencies

    TypeScript 47 27

  3. advanced-security-material advanced-security-material Public

    Shell 65 23

  4. codeql-coding-standards-bundle-releases codeql-coding-standards-bundle-releases Public

    CodeQL bundles containing the CodeQL Coding Standards queries

    4 3

  5. codeql-bundle-action codeql-bundle-action Public

    Action to retrofit a CodeQL bundle with additional queries, libraries, and customizations

    Shell 19 7

Repositories

Showing 10 of 86 repositories
  • slack-secret-scanning-notifier-azure-function Public

    Slack notifier for Secret Scanning alerts from GitHub Advanced Security, using a GitHub App and Azure Function

    advanced-security/slack-secret-scanning-notifier-azure-function’s past year of commit activity
    TypeScript 2 MIT 2 3 1 Updated Sep 21, 2024
  • teams-secret-scanning-notifier-azure-function Public

    Microsoft Teams notifier for Secret Scanning alerts from GitHub Advanced Security, using a GitHub App and Azure Function

    advanced-security/teams-secret-scanning-notifier-azure-function’s past year of commit activity
    TypeScript 5 MIT 1 1 1 Updated Sep 21, 2024
  • advanced-security-material Public
    advanced-security/advanced-security-material’s past year of commit activity
    Shell 65 23 1 1 Updated Sep 20, 2024
  • gh-sbom Public

    Generate SBOMs with gh CLI

    advanced-security/gh-sbom’s past year of commit activity
    Go 164 MIT 13 13 0 Updated Sep 20, 2024
  • codeql-sarif-security-standard-annotator Public

    Compare a CodeQL SARIF results file to a security standard CWE list and annotate the SARIF rules with a tag to highlight results applicable to the security standard

    advanced-security/codeql-sarif-security-standard-annotator’s past year of commit activity
    TypeScript 6 MIT 1 1 12 Updated Sep 20, 2024
  • SARIF-viewer Public

    JetBrains IDE plugin for displaying SARIF from GHAS or from a local file

    advanced-security/SARIF-viewer’s past year of commit activity
    Kotlin 8 MIT 2 3 1 Updated Sep 19, 2024
  • codeql-extractor-iac Public

    CodeQL Extractor, Library, and Queries for Infrastructure as Code

    advanced-security/codeql-extractor-iac’s past year of commit activity
    CodeQL 38 MIT 5 16 1 Updated Sep 17, 2024
  • codeql-summarize Public

    CodeQL Summary Generator

    advanced-security/codeql-summarize’s past year of commit activity
    Python 6 MIT 2 2 1 Updated Sep 17, 2024
  • gh-codeql-scan Public

    GH CLI CodeQL Scan Extension

    advanced-security/gh-codeql-scan’s past year of commit activity
    Shell 17 MIT 5 1 0 Updated Sep 16, 2024
  • probot-security-alerts Public

    Sample GitHub App which monitors and enforces rules for code scanning, Dependabot, and secret scanning alerts

    advanced-security/probot-security-alerts’s past year of commit activity
    TypeScript 18 MIT 9 8 9 Updated Sep 15, 2024
View all repositories

Top languages

Loading…

Most used topics

Loading…