ghas

FidelusAleksander/ghcertified

Prepare for GitHub Certification exams!

NickLiffen/ghas-enablement

A tool that aims to bulk automates the enablement of GitHub Code Scanning, Secret Scanning and Dependabot across multiple repositories.

GeekMasher/advanced-security-compliance

GitHub Advance Security Compliance Action

advanced-security/probot-security-alerts

Sample GitHub App which monitors and enforces rules for code scanning, Dependabot, and secret scanning alerts

advanced-security/gh-codeql-scan

GH CLI CodeQL Scan Extension

advanced-security/enterprise-security-team

Manage a uniform team of security managers for every organization in your enterprise

AndreaGriffiths11/LatinX-Experts-2022

Recursos meetup LatinXperts

david-wiggs/codeql-anywhere

Put the power of CodeQL in your pocket, take it with you to any CI 🚀

advanced-security/ghas-license-utilization

Optimize the utilization of GHAS licenses in an enterprise (or organization)

advanced-security/monorepo-filtering-workaround

A monorepo filtering workaround for GitHub Advanced Security Code Scanning using renaming of the scanning tool in an Actions workflow

marietheresa/improved-lamp

Repository for my GitHub Universe 2023 session SEC1808M

affrae/ghas-report-downloader

lists code scanning SARIF reports for a given GitHub hosted repository and allows the user to identify and download these reports.

austimkelly/secretsynth

A secret scanner wrapper to aggregate results across multiple secret scanning tools

CallMeGreg/gh-secret-scanning

A gh CLI extension to interact with secret scanning alerts for a GHEC or GHES 3.7+ enterprise, organization, or repository

advanced-security/ghe-cross-instance-committers

A script which will return the total number of unique de-deuped active committers across multiple GHES instances

austimkelly/swiss-cheese

A demo repository of simple OWASP Top 10 type of vulnerabilities in (mostly) Python. Includes an exploration of GHAS features.

AndreaGriffiths11/speed-demo

Security Testing

Howters/AzureDevOps-GHAS-Repo-Cloner

Automate repository cloning and pipeline setup across Azure DevOps projects while integrating GitHub Advanced Security (GHAS) for comprehensive code scanning. Simplify cross-project collaboration and ensure robust security measures with this seamless extension.

Howters/GHAS-Scan-Result-Exporter

GHAS Scan Result Exporter: Simplifies GHAS scan data retrieval into Excel sheets ('Code QL', 'Dependency Scanning', 'Secret Scanning'). With ExcelJS & Nodemailer, enhance security workflow and team collaboration.

robertoargs-certifications/ghcertified

Prepare for GitHub Certification exams!

austenstone/security-export

GitHub Action to export GitHub security alerts

futuredesignUK/code-scanning-ado

GHAS - Run CodeQL on ADO Pipelines with code in GitHub

joshjohanning-org/ghas-demo

this is a sample security scanning repo

tfsjohan/github-copilot-demo-dotnet

En .net project to demo GitHub Copilot and GitHub Advanced Security.

bxtp4p-demos/codeql-tekton-example

Example of running CodeQL in Tekton

dataopstix/gitoxy

Gitoxy is a tool that alleviates pain by automating GitHub operations such as configuring GitHub Advanced Security (GHAS) and workflows.

expert-services/ghas-alerts

For when the Security Overview is not quite enough

security-demo-org/.github

Organization-wide GitHub configurations

visibilitysaurus/.github

aloilor/org-formation-github-actions

Containing how to setup OIDC provider and IAM role to use org-formation-cli with GitHub Actions

nhatthm/gh-actions

A collection of GitHub Actions for building and deploying projects.