Skip to content
@advanced-security

GitHub Advanced Security

Home of Advanced Security solutions that we can share with the world
README.md

Welcome to the GitHub Advanced Security Organisation! 👋

This organisation contains open source initiatives created by developers at GitHub (and around the world) to show the art of the possible with advanced security. :octocat: 💻

GitHub Advanced Security consists of CodeQL, Code Scanning, Secret Scanning, Security Overview and Dependency Review. A core principle of each of these solutions is being automated and integrable via API's and Webhooks. In this organisation, you will find starter kits, actions, custom queries and bundles, scripts and full-blown solutions that show off how you can integrate into GitHub Advanced Security (GHAS).

In comparison to the official GitHub organisation, a lot of the software you find here is developed as a best effort. These are open-source solutions developed outside of core responsibilities but with the aim for you to leverage and consume as you would any standard open-source software. 👐

We love contributions and feedback from you! So please feel free to open pull requests and issues as you can! 💕

Welcome and we hope what you find here useful 🙇

Pinned Loading

  1. awesome-codeql awesome-codeql Public

    A curated list of awesome CodeQL resources.

    57 7

  2. awesome-secret-scanning awesome-secret-scanning Public

    A curated list of awesome GitHub Advanced Security secret scanning resources.

    12 2

  3. secret-scanning-custom-patterns secret-scanning-custom-patterns Public

    Examples of Custom Secret Scanning Patterns

    HTML 168 28

  4. awesome-dependabot awesome-dependabot Public

    A curated list of awesome Dependabot (and related software supply chain) resources.

    6 3

  5. advanced-security-material advanced-security-material Public

    Shell 76 25

Repositories

Showing 10 of 95 repositories
  • github-sbom-toolkit Public

    Gather SBOMs from the GitHub Dependency Graph and report matches with packages, such as malware advisories from the GitHub Advisory Database or PURLs of your choice

    advanced-security/github-sbom-toolkit’s past year of commit activity
    TypeScript 9 MIT 3 0 0 Updated Nov 28, 2025
  • codeql-sap-js Public

    CodeQL models for SAP JavaScript frameworks CAP, UI5 and XSJS

    advanced-security/codeql-sap-js’s past year of commit activity
    TypeScript 6 MIT 3 12 9 Updated Nov 28, 2025
  • sample-javascript-monorepo Public

    Detached fork of babel/babel to use as a TypeScript monorepo sample with 150+ packages using the monorepo-code-scanning-action https://github.com/advanced-security/monorepo-code-scanning-action

    advanced-security/sample-javascript-monorepo’s past year of commit activity
    TypeScript 0 MIT 0 0 6 Updated Nov 28, 2025
  • SARIF-viewer Public

    JetBrains IDE plugin for displaying SARIF from GHAS or from a local file

    advanced-security/SARIF-viewer’s past year of commit activity
    Kotlin 8 MIT 4 3 7 Updated Nov 26, 2025
  • component-detection-dependency-submission-action Public
    advanced-security/component-detection-dependency-submission-action’s past year of commit activity
    TypeScript 18 MIT 22 4 2 Updated Nov 26, 2025
  • teams-secret-scanning-notifier-azure-function Public

    Microsoft Teams notifier for Secret Scanning alerts from GitHub Advanced Security, using a GitHub App and Azure Function

    advanced-security/teams-secret-scanning-notifier-azure-function’s past year of commit activity
    TypeScript 8 MIT 1 1 1 Updated Nov 25, 2025
  • slack-secret-scanning-notifier-azure-function Public

    Slack notifier for Secret Scanning alerts from GitHub Advanced Security, using a GitHub App and Azure Function

    advanced-security/slack-secret-scanning-notifier-azure-function’s past year of commit activity
    TypeScript 3 MIT 2 3 1 Updated Nov 25, 2025
  • gh-add-files Public

    A GitHub CLI Extension that allows you to add files to your GitHub repositories directly from the command line

    advanced-security/gh-add-files’s past year of commit activity
    Go 8 MIT 2 0 0 Updated Nov 25, 2025
  • spdx-dependency-submission-action Public

    upload an SPDX 2.2 formatted SBOM to GitHub's dependency submission API

    advanced-security/spdx-dependency-submission-action’s past year of commit activity
    JavaScript 19 MIT 6 2 2 Updated Nov 24, 2025
  • reusable-workflows Public

    Advanced Security Reusable GitHub Actions Workflows

    advanced-security/reusable-workflows’s past year of commit activity
    3 MIT 5 4 4 Updated Nov 24, 2025
View all repositories

Top languages

Loading…

Most used topics

Loading…