Actions for running CodeQL analysis

This bootcamp is designed to familiarize you with GitHub Advanced Security (GHAS) so that you can better understand how to use it in your own repositories.

A GitHub action for organizations that enables advanced security code scanning on all new repos

GitHub Advanced Security Pull Request Security Team required review GitHub App

Vulnerable Terraform Projects - Fork of https://github.com/bridgecrewio/terragoat

GitHub Advanced Security Python Toolkit

GitHub Advanced Security C# Demo Application

GitHub Advanced Security Python Demo Application

Optimize the utilization of GHAS licenses in an enterprise (or organization)

A monorepo filtering workaround for GitHub Advanced Security Code Scanning using renaming of the scanning tool in an Actions workflow

Integrate GoKart security static analysis to GitHub Actions

GitHub Advanced Security scanning tutorial repository for Java

A gh CLI extension to interact with secret scanning alerts for a GHEC or GHES 3.7+ enterprise, organization, or repository

OWASP iGoat (Swift) - A Damn Vulnerable Swift Application for iOS

Advanced Security with Docker

Fork of https://github.com/satishpatnayak/AndroGoat

Focus SAST scans (with CodeQL) on just the changed parts of your monorepo, split up as you define

Tracking resources, materials, links and milestones for Journey to GitHub Certification