Skip to content

@advanced-security GitHub Advanced Security

All

    Repositories list

    103 repositories

    • sample-javascript-monorepo

      Public
      Detached fork of babel/babel to use as a TypeScript monorepo sample with 150+ packages using the monorepo-code-scanning-action https://github.com/advanced-secu…
      TypeScript
      •
      MIT License
      •1•0•0•6•Updated Oct 23, 2026Oct 23, 2026

    • codeql-development-mcp-server

      Public
      LLM <-- MCP --> CodeQL( AST | CFG | CLI | LSP )
      mcpstatic-analysisast
      mcpstatic-analysisastcode-qualitycfglspcode-securitycodeqlcopilot-enabled
      TypeScript
      •
      Other
      •4•38•4•1•Updated Oct 22, 2026Oct 22, 2026

    • codeql-abom

      Public
      Actions Bill of Materials, enriched via CodeQL + Dependabot + GHSA
      Go
      •
      Other
      •0•1•0•1•Updated Oct 22, 2026Oct 22, 2026

    • generate-sbom-action

      Public
      An Action to wrap creating an SBOM via REST API
      TypeScript
      •
      MIT License
      •5•21•3•11•Updated Oct 22, 2026Oct 22, 2026

    • codeql-sap-js

      Public
      CodeQL models for SAP JavaScript frameworks CAP, UI5 and XSJS
      TypeScript
      •
      MIT License
      •6•8•10•10•Updated Oct 22, 2026Oct 22, 2026

    • reusable-workflows

      Public
      Advanced Security Reusable GitHub Actions Workflows
      MIT License
      •5•5•4•7•Updated Oct 22, 2026Oct 22, 2026

    • maven-dependency-submission-action

      Public
      GitHub Action for submitting Maven dependencies
      dependency-submission
      dependency-submission
      TypeScript
      •
      MIT License
      •40•62•15•12•Updated Oct 21, 2026Oct 21, 2026

    • codeql-sarif-security-standard-annotator

      Public
      Compare a CodeQL SARIF results file to a security standard CWE list and annotate the SARIF rules with a tag to highlight results applicable to the security stan…
      TypeScript
      •
      MIT License
      •1•10•1•2•Updated Oct 21, 2026Oct 21, 2026

    • codeql-bundle

      Public
      CLI to build a custom CodeQL bundle
      Python
      •
      MIT License
      •6•15•6•9•Updated Oct 21, 2026Oct 21, 2026

    • awesome-secret-scanning

      Public
      A curated list of awesome GitHub Advanced Security secret scanning resources.
      awesomeawesome-listsecret-scanning
      awesomeawesome-listsecret-scanninggithub-advanced-security
      PowerShell
      •
      MIT License
      •9•18•1•5•Updated Oct 21, 2026Oct 21, 2026

    • dismiss-alerts

      Public
      Dismiss GitHub Code Scanning alerts from SARIF suppression data
      sarifcode-scanningsast
      sarifcode-scanningsastcode-securityghasgithub-advanced-security
      TypeScript
      •
      MIT License
      •5•23•2•14•Updated Oct 20, 2026Oct 20, 2026

    • component-detection-dependency-submission-action

      Public
      This GitHub Action runs the microsoft/component-detection library to automate dependency extraction at build time.
      github-actionsdependency-submission
      github-actionsdependency-submission
      TypeScript
      •
      MIT License
      •31•26•1•6•Updated Oct 20, 2026Oct 20, 2026

    • SARIF-viewer

      Public
      JetBrains IDE plugin for displaying SARIF from GHAS or from a local file
      Kotlin
      •
      MIT License
      •5•11•3•2•Updated Oct 20, 2026Oct 20, 2026

    • ghas-reviewer-app

      Public
      GitHub Advanced Security Pull Request Security Team required review GitHub App
      github-appadvanced-security
      github-appadvanced-security
      Python
      •
      MIT License
      •11•36•7•1•Updated Oct 20, 2026Oct 20, 2026

    • secret-scanning-review-action

      Public
      Action to detect if a secret is initially detected in a pull request
      PowerShell
      •
      MIT License
      •8•24•4•9•Updated Oct 19, 2026Oct 19, 2026

    • ghas-copilot-canvas

      Public
      MIT License
      •1•3•1•1•Updated Oct 19, 2026Oct 19, 2026

    • codeql-development-template

      Public template
      Copilot-native repository template for CodeQL query development
      CodeQL
      •
      MIT License
      •4•12•1•9•Updated Oct 19, 2026Oct 19, 2026

    • spdx-dependency-submission-action

      Public
      upload an SPDX 2.2 formatted SBOM to GitHub's dependency submission API
      dependency-submission
      dependency-submission
      JavaScript
      •
      MIT License
      •9•31•0•0•Updated Oct 19, 2026Oct 19, 2026

    • advanced-security-material

      Public
      securitycode-scanningcodeql
      securitycode-scanningcodeqladvanced-securityadvanced-security-training
      Shell
      •26•80•2•4•Updated Oct 17, 2026Oct 17, 2026

    • secret-scanning-notifications

      Public
      A GitHub Action that sends email notifications to security manager team for any new or resolved secret scanning alerts based on a set frequency
      TypeScript
      •
      MIT License
      •3•1•1•7•Updated Oct 17, 2026Oct 17, 2026

    • secret-validator-grunt

      Public
      Agentic validation of GitHub Secret Scanning alerts.
      Python
      •
      MIT License
      •0•0•0•0•Updated Oct 16, 2026Oct 16, 2026

    • validate-secrets

      Public
      Extensible secret validation tool for GitHub Secret Scanning and beyond.
      Python
      •
      MIT License
      •2•2•1•3•Updated Oct 16, 2026Oct 16, 2026

    • codeql-scanner-vscode

      Public
      CodeQL Plugin for VSCode to help scan and view alerts in code
      TypeScript
      •
      MIT License
      •2•6•1•7•Updated Oct 16, 2026Oct 16, 2026

    • codeql-extractor-iac

      Public
      CodeQL Extractor, Library, and Queries for Infrastructure as Code
      CodeQL
      •
      MIT License
      •12•62•14•8•Updated Oct 16, 2026Oct 16, 2026

    • ghe-cross-instance-committers

      Public
      A script which will return the total number of unique de-deuped active committers across multiple GHES instances
      ghas
      ghas
      TypeScript
      •
      MIT License
      •5•6•2•11•Updated Oct 16, 2026Oct 16, 2026

    • cocoapods-dependency-submission-action

      Public
      CocoaPods Lockfile Dependency Submission Action
      Python
      •
      MIT License
      •3•5•2•3•Updated Oct 15, 2026Oct 15, 2026

    • gh-ghas-audit

      Public
      GitHub CLI extension to audit GHAS and code scanning setup for one or more organizations and repositories.
      gh-extension
      gh-extension
      Go
      •
      MIT License
      •2•6•0•3•Updated Oct 15, 2026Oct 15, 2026

    • policy-as-code

      Public
      GitHub Advanced Security Policy as Code
      Python
      •
      MIT License
      •21•104•3•4•Updated Oct 15, 2026Oct 15, 2026

    • slack-secret-scanning-notifier-azure-function

      Public
      Slack notifier for Secret Scanning alerts from GitHub Advanced Security, using a GitHub App and Azure Function
      slack-botsecret-scanninggithub-advanced-security
      slack-botsecret-scanninggithub-advanced-security
      TypeScript
      •
      MIT License
      •2•4•3•1•Updated Oct 12, 2026Oct 12, 2026

    • gradle-lock-dependency-submission-action

      Public
      Gradle Lockfile Dependency Submission Action
      Python
      •
      MIT License
      •1•2•0•4•Updated Oct 12, 2026Oct 12, 2026
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.