DigiCert Software Trust [ Stage ]

DigiCert Software Trust and GitHub

DigiCert Software Trust integrates with GitHub to enable organizations to secure their software supply chain while maintaining efficient and uninterrupted development workflows. By combining continuous scanning with enforceable security controls, Software Trust enables teams to build, verify, and release trusted software with confidence.

What You Can Do

Scan to Detect Vulnerabilities

Continuously monitor your repositories for risks across your entire software supply chain.

• Scan GitHub repositories for vulnerabilities across the software supply chain, including code, dependencies, CI/CD pipelines, infrastructure, and runtime configurations
• Receive real-time feedback directly within pull requests
• View detailed insights, including severity, location, and clear remediation guidance
• Help developers quickly identify, understand, and fix issues with actionable recommendations

Controls to Manage Users and Policies

Define and enforce security policies across your GitHub projects in minutes.

• Implement policies for code signing, scanning frequency, remediation requirements, and CI/CD integrations
• Manage and secure repositories, cloud infrastructure, and APIs
• Centralize your entire DevSecOps toolchain within a single unified platform

Screenshots

Get Started

Install the GitHub App and connect your DigiCert account to start securing your repositories today.

Support

Need help getting started?

• Support Portal: https://www.digicert.com/support
• Contact Us: https://www.digicert.com/contact-us