Skip to content

Latest commit

 

History

History
 
 

code-scanning

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
properties
properties
 
 
README.md
README.md
 
 
anchore-syft.yml
anchore-syft.yml
 
 
anchore.yml
anchore.yml
 
 
apisec-scan.yml
apisec-scan.yml
 
 
appknox.yml
appknox.yml
 
 
bandit.yml
bandit.yml
 
 
bearer.yml
bearer.yml
 
 
brakeman.yml
brakeman.yml
 
 
checkmarx-one.yml
checkmarx-one.yml
 
 
checkmarx.yml
checkmarx.yml
 
 
clj-holmes.yml
clj-holmes.yml
 
 
clj-watson.yml
clj-watson.yml
 
 
cloudrail.yml
cloudrail.yml
 
 
codacy.yml
codacy.yml
 
 
codeql.yml
codeql.yml
 
 
codescan.yml
codescan.yml
 
 
contrast-scan.yml
contrast-scan.yml
 
 
crda.yml
crda.yml
 
 
credo.yml
credo.yml
 
 
crunch42.yml
crunch42.yml
 
 
datree.yml
datree.yml
 
 
debricked.yml
debricked.yml
 
 
defender-for-devops.yml
defender-for-devops.yml
 
 
dependency-review.yml
dependency-review.yml
 
 
detekt.yml
detekt.yml
 
 
devskim.yml
devskim.yml
 
 
endorlabs.yml
endorlabs.yml
 
 
eslint.yml
eslint.yml
 
 
ethicalcheck.yml
ethicalcheck.yml
 
 
flawfinder.yml
flawfinder.yml
 
 
fortify.yml
fortify.yml
 
 
frogbot-scan-and-fix.yml
frogbot-scan-and-fix.yml
 
 
frogbot-scan-pr.yml
frogbot-scan-pr.yml
 
 
hadolint.yml
hadolint.yml
 
 
jfrog-sast.yml
jfrog-sast.yml
 
 
jscrambler-code-integrity.yml
jscrambler-code-integrity.yml
 
 
kubesec.yml
kubesec.yml
 
 
lintr.yml
lintr.yml
 
 
mayhem-for-api.yml
mayhem-for-api.yml
 
 
mobsf.yml
mobsf.yml
 
 
msvc.yml
msvc.yml
 
 
neuralegion.yml
neuralegion.yml
 
 
njsscan.yml
njsscan.yml
 
 
nowsecure-mobile-sbom.yml
nowsecure-mobile-sbom.yml
 
 
nowsecure.yml
nowsecure.yml
 
 
ossar.yml
ossar.yml
 
 
osv-scanner.yml
osv-scanner.yml
 
 
phpmd.yml
phpmd.yml
 
 
pmd.yml
pmd.yml
 
 
policy-validator-cfn.yaml
policy-validator-cfn.yaml
 
 
policy-validator-tf.yaml
policy-validator-tf.yaml
 
 
powershell.yml
powershell.yml
 
 
prisma.yml
prisma.yml
 
 
psalm.yml
psalm.yml
 
 
puppet-lint.yml
puppet-lint.yml
 
 
pyre.yml
pyre.yml
 
 
pysa.yml
pysa.yml
 
 
rubocop.yml
rubocop.yml
 
 
rust-clippy.yml
rust-clippy.yml
 
 
scorecard.yml
scorecard.yml
 
 
securitycodescan.yml
securitycodescan.yml
 
 
semgrep.yml
semgrep.yml
 
 
snyk-container.yml
snyk-container.yml
 
 
snyk-infrastructure.yml
snyk-infrastructure.yml
 
 
snyk-security.yml
snyk-security.yml
 
 
sobelow.yml
sobelow.yml
 
 
sonarcloud.yml
sonarcloud.yml
 
 
sonarqube.yml
sonarqube.yml
 
 
soos-dast-scan.yml
soos-dast-scan.yml
 
 
stackhawk.yml
stackhawk.yml
 
 
synopsys-action.yml
synopsys-action.yml
 
 
synopsys-io.yml
synopsys-io.yml
 
 
sysdig-scan.yml
sysdig-scan.yml
 
 
tfsec.yml
tfsec.yml
 
 
trivy.yml
trivy.yml
 
 
veracode.yml
veracode.yml
 
 
xanitizer.yml
xanitizer.yml
 
 
zscaler-iac-scan.yml
zscaler-iac-scan.yml
 
 
zscan.yml
zscan.yml
 
 

README.md

Code Scanning Workflows

GitHub code scanning is a developer-first, GitHub-native approach to easily find security vulnerabilities before they reach production. Before you can configure code scanning for a repository, you must enable code scanning by adding a GitHub Actions workflow to the repository. For more information, see Setting up code scanning for a repository.