Files

T

Josh Gross 1e05f3c86d Update starter workflows to use the latest artifact actions (#2726 )

* Update starter workflows to use the latest artifact actions

* Ensure incompatible artifact actions aren't synced to GHES

2025-01-21 15:06:02 -05:00

properties

pass token over stdin, add security to properties

2024-10-22 11:53:35 +03:00

anchore-syft.yml

Checkout: Update all workflows to use Checkout V4

2024-04-05 15:29:37 -04:00

anchore.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

apisec-scan.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

appknox.yml

Remove stray -

2025-01-13 20:52:25 -05:00

bandit.yml

Checkout: Update all workflows to use Checkout V4

2025-01-06 09:43:57 -05:00

bearer.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

brakeman.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

checkmarx-one.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

checkmarx.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

clj-holmes.yml

Checkout: Update all workflows to use Checkout V4

2025-01-06 09:43:57 -05:00

clj-watson.yml

Checkout: Update all workflows to use Checkout V4

2025-01-06 09:43:57 -05:00

cloudrail.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

codacy.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

codeql.yml

CodeQL - Add unique name vs default setup

2024-08-23 10:49:57 -04:00

codescan.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

contrast-scan.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

crda.yml

Merge branch 'main' into bump-actions

2025-01-14 13:13:27 -05:00

credo.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

crunch42.yml

Checkout: Update all workflows to use Checkout V4

2024-04-05 15:29:37 -04:00

datree.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

debricked.yml

Add Debricked starter workflow (#2107 )

2024-08-16 10:16:20 -05:00

defender-for-devops.yml

Merge branch 'main' into bump-actions-upload-sarif

2024-07-30 10:41:29 -07:00

dependency-review.yml

Update code-scanning/dependency-review.yml

2024-02-07 09:06:01 -06:00

detekt.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

devskim.yml

Ubuntu-Latest: Update all workflows to use ubuntu-latest

2024-08-06 01:11:49 -04:00

endorlabs.yml

Merge branch 'main' into bump-actions-upload-sarif

2024-07-30 10:41:29 -07:00

eslint.yml

Update code-scanning/eslint.yml

2024-09-11 11:12:06 -07:00

ethicalcheck.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

flawfinder.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

fortify.yml

Fortify Starter Workflow to use new Fortify AST Action (#2245 )

2024-05-06 13:57:14 +00:00

frogbot-scan-and-fix.yml

Update to 2.21.2

2024-06-28 15:56:30 +03:00

frogbot-scan-pr.yml

Update to 2.21.2

2024-06-28 15:56:30 +03:00

hadolint.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

jfrog-sast.yml

pass token over stdin, add security to properties

2024-10-22 11:53:35 +03:00

jscrambler-code-integrity.yml

Setup-Node: Update all workflows to use Setup-Node V4

2024-04-25 17:42:55 -04:00

kubesec.yml

Ubuntu-Latest: Update all workflows to use ubuntu-latest

2024-08-06 01:11:49 -04:00

lintr.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

mayhem-for-api.yml

Merge branch 'main' into main

2024-08-01 14:50:04 -07:00

mobsf.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

msvc.yml

Update starter workflows to use the latest artifact actions (#2726 )

2025-01-21 15:06:02 -05:00

neuralegion.yml

Checkout: Update all workflows to use Checkout V4

2025-01-06 09:43:57 -05:00

njsscan.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

nowsecure-mobile-sbom.yml

Checkout: Update all workflows to use Checkout V4

2024-04-05 15:29:37 -04:00

nowsecure.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

ossar.yml

Merge branch 'main' into bump-actions-upload-sarif

2024-07-30 10:41:29 -07:00

osv-scanner.yml

Add OSV-Scanner code scanning workflow (#2350 )

2024-04-09 22:21:33 -05:00

phpmd.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

pmd.yml

Merge branch 'main' into bump-actions-upload-sarif

2024-07-30 10:41:29 -07:00

policy-validator-cfn.yaml

Update policy validator starter workflows (#2433 )

2024-06-17 15:32:21 -05:00

policy-validator-tf.yaml

Update policy validator starter workflows (#2433 )

2024-06-17 15:32:21 -05:00

powershell.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

prisma.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

psalm.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

puppet-lint.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

pyre.yml

Checkout: Update all workflows to use Checkout V4

2024-04-05 15:29:37 -04:00

pysa.yml

Checkout: Update all workflows to use Checkout V4

2024-04-05 15:29:37 -04:00

README.md

Fix broken link in README.md

2021-04-17 14:08:56 -04:00

rubocop.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

rust-clippy.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

scorecard.yml

Revert "Artifacts: Update all workflows to use Artifacts V4"

2024-07-30 10:17:07 -07:00

securitycodescan.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

semgrep.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

snyk-container.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

snyk-infrastructure.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

snyk-security.yml

Merge branch 'main' into bump-actions-upload-sarif

2024-07-30 10:41:29 -07:00

sobelow.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

sonarcloud.yml

Update sonarcloud.yml after latest release of the action (#2405 )

2024-06-03 13:58:42 -05:00

sonarqube.yml

Fix whitespaces

2022-12-08 06:10:22 +00:00

soos-dast-scan.yml

Update soos-dast-scan.yml hash (#2466 )

2024-08-16 10:10:57 -05:00

stackhawk.yml

Ubuntu-Latest: Update all workflows to use ubuntu-latest

2024-08-06 01:11:49 -04:00

synopsys-action.yml

Checkout: Update all workflows to use Checkout V4

2024-04-05 15:29:37 -04:00

synopsys-io.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

sysdig-scan.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

tfsec.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

trivy.yml

Ubuntu-Latest: Update all workflows to use ubuntu-latest

2024-08-06 01:11:49 -04:00

veracode.yml

Merge branch 'main' into bump-actions-upload-sarif

2024-07-30 10:41:29 -07:00

xanitizer.yml

Update starter workflows to use the latest artifact actions (#2726 )

2025-01-21 15:06:02 -05:00

zscaler-iac-scan.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

zscan.yml

Upload-Sarif: Update all workflows to use Upload-Sarif V3

2024-07-25 09:43:06 -04:00

README.md

Code Scanning Workflows

GitHub code scanning is a developer-first, GitHub-native approach to easily find security vulnerabilities before they reach production. Before you can configure code scanning for a repository, you must enable code scanning by adding a GitHub Actions workflow to the repository. For more information, see Setting up code scanning for a repository.