GitHub Advanced Security · GitHub
Skip to content
@advanced-security

GitHub Advanced Security

Home of Advanced Security solutions that we can share with the world

Welcome to the GitHub Advanced Security Organisation! 👋

This organisation contains open source initiatives created by developers at GitHub (and around the world) to show the art of the possible with advanced security. :octocat: 💻

GitHub Advanced Security consists of CodeQL, Code Scanning, Secret Scanning, Security Overview and Dependency Review. A core principle of each of these solutions is being automated and integrable via API's and Webhooks. In this organisation, you will find starter kits, actions, custom queries and bundles, scripts and full-blown solutions that show off how you can integrate into GitHub Advanced Security (GHAS).

In comparison to the official GitHub organisation, a lot of the software you find here is developed as a best effort. These are open-source solutions developed outside of core responsibilities but with the aim for you to leverage and consume as you would any standard open-source software. 👐

We love contributions and feedback from you! So please feel free to open pull requests and issues as you can! 💕

Welcome and we hope what you find here useful 🙇

Pinned Loading

  1. awesome-codeql awesome-codeql Public

    A curated list of awesome CodeQL resources.

    96 8

  2. awesome-secret-scanning awesome-secret-scanning Public

    A curated list of awesome GitHub Advanced Security secret scanning resources.

    PowerShell 18 9

  3. secret-scanning-custom-patterns secret-scanning-custom-patterns Public

    Examples of Custom Secret Scanning Patterns for use with GitHub Secret Protection/Advanced Security

    HTML 182 29

  4. awesome-dependabot awesome-dependabot Public

    A curated list of awesome Dependabot (and related software supply chain) resources.

    14 5

  5. advanced-security-material advanced-security-material Public

    Shell 80 26

Repositories

Showing 10 of 103 repositories
  • codeql-sap-js Public

    CodeQL models for SAP JavaScript frameworks CAP, UI5 and XSJS

    advanced-security/codeql-sap-js's past year of commit activity
    TypeScript 8 MIT 6 10 10 Updated Oct 26, 2026
  • secret-validator-grunt Public

    Agentic validation of GitHub Secret Scanning alerts.

    advanced-security/secret-validator-grunt's past year of commit activity
    Python 0 MIT 0 0 1 Updated Oct 26, 2026
  • codeql-abom Public

    Actions Bill of Materials, enriched via CodeQL + Dependabot + GHSA

    advanced-security/codeql-abom's past year of commit activity
    Go 1 0 0 1 Updated Oct 26, 2026
  • secret-scanning-review-action Public

    Action to detect if a secret is initially detected in a pull request

    advanced-security/secret-scanning-review-action's past year of commit activity
    PowerShell 24 MIT 8 4 9 Updated Oct 26, 2026
  • validate-secrets Public

    Extensible secret validation tool for GitHub Secret Scanning and beyond.

    advanced-security/validate-secrets's past year of commit activity
    Python 2 MIT 2 1 5 Updated Oct 26, 2026
  • flake8-sarif-formatter Public

    Format Flake8 results as SARIF for input to SAST tools such as GitHub Code Scanning

    advanced-security/flake8-sarif-formatter's past year of commit activity
    Python 2 MIT 2 1 4 Updated Oct 26, 2026
  • cocoapods-dependency-submission-action Public

    CocoaPods Lockfile Dependency Submission Action

    advanced-security/cocoapods-dependency-submission-action's past year of commit activity
    Python 5 MIT 3 2 5 Updated Oct 26, 2026
  • secret-scanning-tools Public

    Testing Suite for GitHub Secret Scanning Custom Patterns

    advanced-security/secret-scanning-tools's past year of commit activity
    Python 8 MIT 3 0 9 Updated Oct 26, 2026
  • policy-as-code Public

    GitHub Advanced Security Policy as Code

    advanced-security/policy-as-code's past year of commit activity
    Python 104 MIT 21 3 5 Updated Oct 25, 2026
  • generate-sbom-action Public

    An Action to wrap creating an SBOM via REST API

    advanced-security/generate-sbom-action's past year of commit activity
    TypeScript 21 MIT 5 3 11 Updated Oct 25, 2026

Most used topics

Loading…