codescanning

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

This action lets you automatically dismiss a large amount of code scanning alerts, based on one or more source files/folders

This repository serves as an exemplary resource demonstrating how to set up CodeQL to scan containerized applications for vulnerabilities. Its primary objective is to showcase the implementation of CodeQL in the code scanning process.

A simple but efficient SAST Tool - A simple Flask-based web app to scan uploaded Python code for security vulnerabilities using Bandit. Easily integratable with CI/CD pipelines and customizable for multiple languages.

A Github action that provides CodeScanAI project to be used in Github workflows.

OWASP's official repository for WebGoat (ASP.NET version)

Free GitHub PR security bot that scans pull requests for leaked secrets and common vulnerability patterns before merge.