Security

Renovate

Renovate Bot automates dependency updates. Flexible so you don't need to be

BackHub

Reliable GitHub repository backup, set up in minutes

WhiteSource Bolt

Detect open source vulnerabilities in real time with suggested fixes for quick remediation

Sonatype DepShield

Monitor your open source components for security vulnerabilities - goodbye muda, hello kaizen

Dependabot Preview

Automated dependency updates for Ruby, JavaScript, Python, Go, PHP, Elixir, Rust, Java and .NET

Snyk

Find, fix (and prevent!) known vulnerabilities in your code

LGTM

Find and prevent zero-days and other critical bugs, with customizable alerts and automated code review

GuardRails

GuardRails provides continuous security feedback for modern development teams

fuzzit.dev

Continuous Fuzzing for C/C++/Java/Golang/Rust and Swift integrated with your current CI/CD workflow

Extant DevSecOps

Speed up your remediation cycles for security vulnerabilities with Extant DevSecOps pipeline tools

Watchtower Radar

Detect credentials and secrets in GitHub repos via machine learning

nexploit.app

NexPloit is a Dynamic Application Security scanner powered by Machine learning and modern scanning technologies

SOOHO ODIN

Audit your smart contract files automatically within a blink

Snyk CLI Action

Run the Snyk CLI

GitHub Action to unlock git-crypt secrets

Unlock secrets using git-crypt from encoded secret-key

Repository Visibility SMS Alert

Notifies active organization owners that a repository has been made public and allows them to react via SMS

Secret Scan

Scan your repository for secrets

action-accesscontrol

Check if the invoker has access defined access level

gitleaks-action

checks your source for embedded key leaks, using gitleaks

Synopsys Detect Action

Run Synopsys Detect to find code quality and security issues with Coverity and Black Duck