act

Run your GitHub Actions locally 🚀

Go1,317 commits

actions

A collection of GitHub Actions to accelerate your Gradle Builds on GitHub

TypeScript2,245 commits

AISVS

The AI Security Verification Standard (AISVS) focuses on providing developers, architects, and security professionals with a structured checklist to verify the security of AI-driven applications.

1,307 commits

ASVS

Application Security Verification Standard

HTML3,281 commits

AutoDispose

Automatic binding+disposal of RxJava streams.

Java434 commits

claude-code-action

No description

TypeScript738 commits

claude-code-base-action

This repo is a mirror of the contents of base-action in https://github.com/anthropics/claude-code-action.

TypeScript451 commits

difftastic

a structural diff that understands syntax 🟥🟩

Rust15,892 commits

gitea

Git with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD

Go21,377 commits

gosec

Go security checker

Go1,423 commits

gradle

Adaptable, fast automation for all

Groovy136,260 commits

haskell-z3

Haskell bindings to Microsoft's Z3 API (unofficial).

Haskell476 commits

infer

A static analyzer for Java, C, C++, and Objective-C

OCaml16,192 commits

java-html-sanitizer

Takes third-party HTML and produces HTML that is safe to embed in your web application. Fast and easy to configure.

Java584 commits

legitify

Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets

Go238 commits

NullAway

A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead

Java1,256 commits

opengrep

🔎 Static code analysis engine to find security issues in code.

OCaml9,955 commits

osx-abi-macho-file-format-reference

Mirror of OS X ABI Mach-O File Format Reference

17 commits

owasp-mstg

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.

Python10,722 commits

pfff

pfff is mainly an OCaml API to write static analysis, dynamic analysis, code visualizations, code navigations, or style-preserving source-to-source transformations such as refactorings on source code.

10,061 commits

proposal-dynamic-code-brand-checks

TC39 proposal that enables flexible brand checks before dynamic code loading

HTML35 commits

RIBs

Uber's cross-platform mobile architecture framework - Android Repository

Kotlin627 commits

scorecard

OpenSSF Scorecard - Security health metrics for Open Source

Go3,102 commits

scorecard-action

Official GitHub Action for OpenSSF Scorecard.

Go642 commits

semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

OCaml10,243 commits

semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

OCaml10,231 commits

semgrep-action

This project is deprecated. Use https://github.com/returntocorp/semgrep instead

Python1,170 commits

setup-bun

Set up your GitHub Actions workflow with a specific version of Bun

TypeScript189 commits

smtml

An SMT solver frontend for OCaml

OCaml1,332 commits

Vulnerable-Flask-App

Intentionally Vulnerable Flask app for use in Demos

Python33 commits