GitHub Advanced Security Code Scanning tutorial for Terraform. Based on Terragoat and tfsec. Fork of https://github.com/bridgecrewio/terragoat

GitHub Advanced Security Pull Request Security Team required review GitHub App

A GitHub Action that sends email notifications to security manager team for any new or resolved secret scanning alerts based on a set frequency

GitHub's Field Team's CodeQL Custom Queries, Suites, and Configurations

Utility to generate tokens to interact with the GitHub API via GitHub App integration

Action to retrofit a CodeQL bundle with additional queries, libraries, and customizations

Use code search to populate an MRVA repo list in VSCode

GitHub Advanced Security Code Scanning demo for Javascript using an application with the Zip Slip Vulnerability.

A boilerplate for an application reacting to webhooks from GitHub, deployed to AWS.

An Action to wrap creating an SBOM via REST API

GitHub Action for filtering Code Scanning alerts by path and id

Demonstration Catalog for different Languages and Technologies

Examples of Custom Secret Scanning Patterns

GH CLI CodeQL Scan Extension