Repositories list

• generate-sbom-action

  Public
  An Action to wrap creating an SBOM via REST API

  TypeScript

  •

  MIT License

  •55 forks•2020 stars•22 issues•88 pull requests•Updated Sep 7, 2026Sep 7, 2026

• dismiss-alerts

  Public
  Dismiss GitHub Code Scanning alerts from SARIF suppression data

  sarifcode-scanningsast+ 3

  sarifcode-scanningsastcode-securityghasgithub-advanced-security

  TypeScript

  •

  MIT License

  •55 forks•2323 stars•22 issues•1414 pull requests•Updated Sep 7, 2026Sep 7, 2026

• slack-secret-scanning-notifier-azure-function

  Public
  Slack notifier for Secret Scanning alerts from GitHub Advanced Security, using a GitHub App and Azure Function

  slack-botsecret-scanninggithub-advanced-security

  slack-botsecret-scanninggithub-advanced-security

  TypeScript

  •

  MIT License

  •22 forks•44 stars•33 issues•00 pull requests•Updated Sep 7, 2026Sep 7, 2026

• flake8-sarif-formatter

  Public
  Format Flake8 results as SARIF for input to SAST tools such as GitHub Code Scanning

  Python

  •

  MIT License

  •22 forks•22 stars•11 issue•22 pull requests•Updated Sep 7, 2026Sep 7, 2026

• ghe-cross-instance-committers

  Public
  A script which will return the total number of unique de-deuped active committers across multiple GHES instances

  ghas

  ghas

  TypeScript

  •

  MIT License

  •55 forks•66 stars•22 issues•1111 pull requests•Updated Sep 6, 2026Sep 6, 2026

• secret-scanning-notifications

  Public
  A GitHub Action that sends email notifications to security manager team for any new or resolved secret scanning alerts based on a set frequency

  TypeScript

  •

  MIT License

  •33 forks•11 star•11 issue•22 pull requests•Updated Sep 4, 2026Sep 4, 2026

• reusable-workflows

  Public
  Advanced Security Reusable GitHub Actions Workflows

  MIT License

  •55 forks•55 stars•44 issues•44 pull requests•Updated Sep 4, 2026Sep 4, 2026

• security-report-action

  Public
  GitHub Action that can generate reports from GitHub Advanced Security and dependency vulnerability findings

  HTML

  •

  MIT License

  •00 forks•44 stars•22 issues•11 pull request•Updated Sep 4, 2026Sep 4, 2026

• maven-dependency-submission-action

  Public
  GitHub Action for submitting Maven dependencies

  dependency-submission

  dependency-submission

  TypeScript

  •

  MIT License

  •3939 forks•6060 stars•1414 issues•88 pull requests•Updated Sep 4, 2026Sep 4, 2026

• validate-secrets

  Public
  Extensible secret validation tool for GitHub Secret Scanning and beyond.

  Python

  •

  MIT License

  •22 forks•22 stars•11 issue•22 pull requests•Updated Sep 4, 2026Sep 4, 2026

• awesome-secret-scanning

  Public
  A curated list of awesome GitHub Advanced Security secret scanning resources.

  awesomeawesome-listsecret-scanning+ 1

  awesomeawesome-listsecret-scanninggithub-advanced-security

  PowerShell

  •

  MIT License

  •77 forks•1717 stars•66 issues•00 pull requests•Updated Sep 4, 2026Sep 4, 2026

• spdx-dependency-submission-action

  Public
  upload an SPDX 2.2 formatted SBOM to GitHub's dependency submission API

  dependency-submission

  dependency-submission

  JavaScript

  •

  MIT License

  •88 forks•3131 stars•00 issues•00 pull requests•Updated Sep 4, 2026Sep 4, 2026

• codeql-extractor-iac

  Public
  CodeQL Extractor, Library, and Queries for Infrastructure as Code

  CodeQL

  •

  MIT License

  •1212 forks•6262 stars•1414 issues•66 pull requests•Updated Sep 4, 2026Sep 4, 2026

• sample-javascript-monorepo

  Public
  Detached fork of babel/babel to use as a TypeScript monorepo sample with 150+ packages using the monorepo-code-scanning-action https://github.com/advanced-secu…

  TypeScript

  •

  MIT License

  •11 fork•00 stars•00 issues•66 pull requests•Updated Sep 4, 2026Sep 4, 2026

• codeql-development-mcp-server

  Public
  LLM <-- MCP --> CodeQL( AST | CFG | CLI | LSP )

  mcpstatic-analysisast+ 6

  mcpstatic-analysisastcode-qualitycfglspcode-securitycodeqlcopilot-enabled

  TypeScript

  •

  Other

  •33 forks•3434 stars•44 issues•22 pull requests•Updated Sep 3, 2026Sep 3, 2026

• SARIF-viewer

  Public
  JetBrains IDE plugin for displaying SARIF from GHAS or from a local file

  Kotlin

  •

  MIT License

  •55 forks•1010 stars•33 issues•33 pull requests•Updated Sep 3, 2026Sep 3, 2026

• github-sbom-toolkit

  Public
  Gather SBOMs from the GitHub Dependency Graph and report matches with packages, such as malware advisories from the GitHub Advisory Database or PURLs of your ch…

  malwaredependency-graphdependencies+ 5

  malwaredependency-graphdependenciessupplychainpurlsbomadvanced-securityghas

  TypeScript

  •

  MIT License

  •88 forks•2121 stars•00 issues•44 pull requests•Updated Sep 3, 2026Sep 3, 2026

• GSSAR

  Public
  GitHub Secret Scanning Auto Remediator (GSSAR)

  githubjavascriptaws+ 3

  githubjavascriptawstypescriptremediationsecret-scanning

  TypeScript

  •

  MIT License

  •1111 forks•5050 stars•33 issues•55 pull requests•Updated Sep 3, 2026Sep 3, 2026

• cocoapods-dependency-submission-action

  Public
  CocoaPods Lockfile Dependency Submission Action

  Python

  •

  MIT License

  •33 forks•55 stars•22 issues•22 pull requests•Updated Sep 3, 2026Sep 3, 2026

• component-detection-dependency-submission-action

  Public
  This GitHub Action runs the microsoft/component-detection library to automate dependency extraction at build time.

  github-actionsdependency-submission

  github-actionsdependency-submission

  TypeScript

  •

  MIT License

  •3030 forks•2626 stars•11 issue•33 pull requests•Updated Sep 3, 2026Sep 3, 2026

• policy-as-code

  Public
  GitHub Advanced Security Policy as Code

  Python

  •

  MIT License

  •2222 forks•106106 stars•33 issues•22 pull requests•Updated Sep 3, 2026Sep 3, 2026

• awesome-codeql

  Public
  A curated list of awesome CodeQL resources.

  awesomeawesome-listgithub-advanced-security

  awesomeawesome-listgithub-advanced-security

  MIT License

  •88 forks•9494 stars•11 issue•11 pull request•Updated Sep 2, 2026Sep 2, 2026

• codeql-sap-js

  Public
  CodeQL models for SAP JavaScript frameworks CAP, UI5 and XSJS

  TypeScript

  •

  MIT License

  •55 forks•88 stars•1111 issues•77 pull requests•Updated Sep 2, 2026Sep 2, 2026

• secret-scanning-tools

  Public
  Testing Suite for GitHub Secret Scanning Custom Patterns

  secret-scanninggithub-advanced-security

  secret-scanninggithub-advanced-security

  Python

  •

  MIT License

  •22 forks•88 stars•00 issues•88 pull requests•Updated Sep 1, 2026Sep 1, 2026

• secret-scanning-review-action

  Public
  Action to detect if a secret is initially detected in a pull request

  PowerShell

  •

  MIT License

  •88 forks•2424 stars•44 issues•66 pull requests•Updated Aug 31, 2026Aug 31, 2026

• codeql-development-template

  Public template
  Copilot-native repository template for CodeQL query development

  CodeQL

  •

  MIT License

  •33 forks•1111 stars•11 issue•77 pull requests•Updated Aug 31, 2026Aug 31, 2026

• advanced-security-material

  Public
  securitycode-scanningcodeql+ 2

  securitycode-scanningcodeqladvanced-securityadvanced-security-training

  Shell

  •2626 forks•8080 stars•44 issues•88 pull requests•Updated Aug 29, 2026Aug 29, 2026

• codeql-development-toolkit

  Public
  The CodeQL Development toolkit is a tool for making common CodeQL development workflows easier.

  C#

  •

  MIT License

  •33 forks•99 stars•1111 issues•55 pull requests•Updated Aug 28, 2026Aug 28, 2026

• codeql-bundle

  Public
  CLI to build a custom CodeQL bundle

  Python

  •

  MIT License

  •66 forks•1515 stars•66 issues•44 pull requests•Updated Aug 28, 2026Aug 28, 2026

• sarif-toolkit

  Public
  All things SARIF, as an Action

  Python

  •

  MIT License

  •44 forks•44 stars•44 issues•44 pull requests•Updated Aug 26, 2026Aug 26, 2026