Files

T

Spencer Schrock 4620c76b38 update Scorecard Action hashes and version comments (#2348 )

* update action hashes and version comments

ossf/scorecard-action v2.1.2 is old and doesnt work after a Sigstore
change. https://blog.sigstore.dev/tuf-root-update/

Signed-off-by: Spencer Schrock <sschrock@google.com>

* downgrade actions/upload-artifact to node20 version of v3

dependabot will suggest upgrade to v4.3.1 for repos that can upgrade.
note: v3.pre.node20 is how dependabot refers to the pinned hash, so
use that so it can upgrade the comment

Signed-off-by: Spencer Schrock <sschrock@google.com>

* upgrade github/codeql-action/upload-sarif to v3.24.9

Signed-off-by: Spencer Schrock <sschrock@google.com>

---------

Signed-off-by: Spencer Schrock <sschrock@google.com>
Co-authored-by: Alexis Abril <alexisabril@github.com>

2024-03-27 13:25:03 -07:00

properties

Synopsys Action's starter workflow (#2234 )

2023-12-22 12:11:56 -06:00

anchore-syft.yml

Add Anchore Syft SBOM scan workflow

2022-08-16 12:47:02 -04:00

anchore.yml

Update Anchore Grype scan action workflow

2022-09-26 10:33:41 -04:00

apisec-scan.yml

Update apisec-scan.yml (#1898 )

2023-03-04 18:12:33 +05:30

bandit.yml

Try to fix lint error (#1914 )

2023-01-23 11:10:50 +05:30

bearer.yml

fix: bearer does not upload sarif report (#2178 )

2023-11-22 16:01:57 -06:00

brakeman.yml

Update ruby/setup-ruby for CVE-2023-28755 and CVE-2023-28756

2023-04-04 14:26:08 -07:00

checkmarx-one.yml

Fix whitespace lint

2022-11-30 10:21:45 +00:00

checkmarx.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

clj-holmes.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

clj-watson.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

cloudrail.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

codacy.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

codeql.yml

Update codeql.yml

2024-03-26 13:45:32 +01:00

codescan.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

contrast-scan.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

crda.yml

Add CRDA starter workflow and modify openshift workflow

2022-06-24 16:25:53 +05:30

credo.yml

removed whitespace

2023-03-24 14:14:25 +00:00

crunch42.yml

Update to latest audit code version (#2209 )

2023-11-13 11:49:29 -06:00

datree.yml

Update code-scanning/datree.yml

2022-12-08 09:57:36 +02:00

defender-for-devops.yml

fixed typo (#1942 )

2023-02-21 18:20:42 +05:30

dependency-review.yml

Update code-scanning/dependency-review.yml

2024-02-07 09:06:01 -06:00

detekt.yml

Bump workflow actions of various starter files (#2210 )

2024-03-27 10:51:41 -07:00

devskim.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

endorlabs.yml

Bump workflow actions of various starter files (#2210 )

2024-03-27 10:51:41 -07:00

eslint.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

ethicalcheck.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

flawfinder.yml

Merge branch 'main' into thboop/updateCodeScanning

2022-03-31 09:32:00 -04:00

fortify.yml

Merge branch 'main' into thboop/updateCodeScanning

2022-03-31 09:32:00 -04:00

frogbot-scan-and-fix.yml

Bump frogbot to v2.10.0

2023-07-13 11:00:03 -05:00

frogbot-scan-pr.yml

Bump frogbot to v2.10.0

2023-07-13 11:00:03 -05:00

hadolint.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

jscrambler-code-integrity.yml

Add Jscrambler Code Integrity starter workflow (#1893 )

2023-01-31 16:25:13 +05:30

kubesec.yml

Merge branch 'main' into thboop/updateCodeScanning

2022-03-31 09:32:00 -04:00

lintr.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

mayhem-for-api.yml

Merge branch 'main' into thboop/updateCodeScanning

2022-03-31 09:32:00 -04:00

mobsf.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

msvc.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

neuralegion.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

njsscan.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

nowsecure-mobile-sbom.yml

Add NowSecure Mobile SBOM starter workflow

2022-09-28 11:25:15 -04:00

nowsecure.yml

Merge branch 'main' into thboop/updateCodeScanning

2022-03-31 09:32:00 -04:00

ossar.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

phpmd.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

pmd.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

powershell.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

prisma.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

psalm.yml

ci: bump github actions version

2023-01-27 14:13:37 +01:00

puppet-lint.yml

Update ruby/setup-ruby for CVE-2023-28755 and CVE-2023-28756

2023-04-04 14:26:08 -07:00

pyre.yml

Add Pyre starter workflow

2022-06-06 18:04:42 -04:00

pysa.yml

Add workflow for Pysa

2022-06-06 18:06:03 -04:00

README.md

Fix broken link in README.md

2021-04-17 14:08:56 -04:00

rubocop.yml

Update ruby/setup-ruby for CVE-2023-28755 and CVE-2023-28756

2023-04-04 14:26:08 -07:00

rust-clippy.yml

Bump workflow actions of various starter files (#2210 )

2024-03-27 10:51:41 -07:00

scorecard.yml

update Scorecard Action hashes and version comments (#2348 )

2024-03-27 13:25:03 -07:00

securitycodescan.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

semgrep.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

snyk-container.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

snyk-infrastructure.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

snyk-security.yml

Addition of snyk-security workflow to enable the Snyk platform from a single GitHub Action (#1939 )

2023-03-07 16:22:52 +05:30

sobelow.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

sonarcloud.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

sonarqube.yml

Fix whitespaces

2022-12-08 06:10:22 +00:00

soos-dast-scan.yml

soos-dast-scan.yml update (#2240 )

2024-02-06 10:44:04 -06:00

stackhawk.yml

Update Actions to node16 (#1469 )

2022-03-28 22:40:48 +05:30

synopsys-action.yml

Synopsys Action's starter workflow (#2234 )

2023-12-22 12:11:56 -06:00

synopsys-io.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

sysdig-scan.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

tfsec.yml

tfsec latest v0.1.4 (#2318 )

2024-03-06 15:46:46 -06:00

trivy.yml

ubuntu runner upgrade to vNext

2023-05-30 09:56:36 -04:00

veracode.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

xanitizer.yml

Remove extra whitespaces

2022-11-04 20:45:41 +01:00

zscaler-iac-scan.yml

update zscaler iac scan version

2022-10-25 16:32:52 +05:30

zscan.yml

Apply suggestions from code review

2022-11-08 14:09:19 +01:00

README.md

Code Scanning Workflows

GitHub code scanning is a developer-first, GitHub-native approach to easily find security vulnerabilities before they reach production. Before you can configure code scanning for a repository, you must enable code scanning by adding a GitHub Actions workflow to the repository. For more information, see Setting up code scanning for a repository.