bridgecrewio/checkov-action

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

Microsoft Security DevOps for GitHub Actions.

Plumber detects CI/CD security issues in your GitHub workflows and gives you a score

Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets

Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities

Protect against malicious open source packages 🤖

CI/CD Security Analyzer