Actions for running CodeQL analysis

This bootcamp is designed to familiarize you with GitHub Advanced Security (GHAS) so that you can better understand how to use it in your own repositories.

A GitHub action for organizations that enables advanced security code scanning on all new repos

GitHub Advanced Security Pull Request Security Team required review GitHub App

GitHub Advanced Security C# Demo Application

GitHub Advanced Security Python Toolkit

Vulnerable Terraform Projects - Fork of https://github.com/bridgecrewio/terragoat

Integrate GoKart security static analysis to GitHub Actions

Optimize the utilization of GHAS licenses in an enterprise (or organization)

GitHub Advanced Security Python Demo Application

GitHub Advanced Security scanning tutorial repository for Java

OWASP iGoat (Swift) - A Damn Vulnerable Swift Application for iOS

A monorepo filtering workaround for GitHub Advanced Security Code Scanning using renaming of the scanning tool in an Actions workflow

A gh CLI extension to interact with secret scanning alerts for a GHEC or GHES 3.7+ enterprise, organization, or repository

Advanced Security with Docker

Fork of https://github.com/satishpatnayak/AndroGoat

GitHub Advanced Security Code Scanning demo using WebGoat, a deliberate insecure web application maintained by OWASP designed to teach web application security lessons.