🚀 Useful README.md, LICENSE, CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, GitHub Issues, Pull Requests and Actions templates to jumpstart your projects.

GitHub Advance Security Compliance Action

Code scanner to check for issues in prompts and LLM calls

A GitHub action for organizations that enables advanced security code scanning on all new repos

CodeScanAI is an open source tool that utilizes powerful AI models (OpenAI, Gemini, and even self-hosted servers) to scan your codebase for possible security vulnerabilities.

Codeaudit - Modern Python source code analyzer based on distrust.

Introdução Guiada ao Code Scanning

A secret scanner wrapper to aggregate results across multiple secret scanning tools

Lets Threat Model is an AI-driven tool that helps teams identify and manage threats early in the development lifecycle. Built with extensibility and automation in mind, it brings security into agile workflows by generating actionable threat models.

Adapters and tools for lintrunner

Aggressive regex based code scanner for Wordpress Themes/Plugins

Git secrets, vulnurabilities scanner with rich reporting

🕵️🐍 Generate requirements.txt and pyproject.toml extras across modules, with configurable starting points, using import graph traversal and the python AST. Fully configurable and works with pre-commit.

Ansible role for 'terrascan'. Available on Ansible Galaxy.

An AI-powered code security analysis platform that helps developers identify and fix security vulnerabilities through comprehensive scanning, smart mitigation, and detailed reporting.

A curated library of reusable GitHub Actions, workflows, and helpers maintained by Diogo Ribeiro (ESMAD — Instituto Politécnico do Porto). This repository stores a collection of reusable GitHub Actions, and the goal is to centralize workflows, composite actions, and utilities so they can be shared across multiple projects.

Code Scanning is enabled / CodeQL is not configured

An AI-powered code security analysis platform that helps developers identify and fix security vulnerabilities through comprehensive scanning, smart mitigation, and detailed reporting.

An AI assistant that automatically scans Terraform code, identifies potential security vulnerabilities, explains the risk, and suggests the corrected code block.

A GitHub Security Lab initiative, providing an in-repo learning experience, where learners secure intentionally vulnerable code.