npm
github/codeql-action
Actions for running CodeQL analysis
MIT12. Sept. 2026 · Metriken 2.10.0
Alle Tags
Katalog-Tag
#code-scanning
Alle Repositories im öffentlichen Register, die dieses Tag tragen — aus ihren GitHub-Topics oder den von ihren Paket-Registries veröffentlichten Schlagwörtern. Die Gesundheit wird nach derselben versionierten Methodik gemessen wie im übrigen Register.
11 Einträge
PyPI · crates.io
duriantaco/skylos
Open source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first timers refer to https://duriantaco.github.io/skylos/repo-map/
Apache-2.015. Sept. 2026 · Metriken 2.10.0
PyPI
cpeoples/ansible-security-scanner
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
Apache-2.09. Sept. 2026 · Metriken 2.10.0
Packagist
laminas/laminas-code
Extensions to the PHP Reflection API, static code scanning, and code generation
BSD-3-Clause27. Aug. 2026 · Metriken 2.10.0
Go
draugr-dev/draugr
Run Trivy, Semgrep, Gitleaks and more from one file. Consolidates SAST, SCA, secrets, IaC and container findings into one SARIF report and one pass/fail gate for CI — ranked by real risk, and can fail a PR on new findings only.
Apache-2.011. Sept. 2026 · Metriken 2.10.0
PyPI
justinchuby/lintrunner-adapters
Adapters and tools for lintrunner
Eigene Lizenz12. Sept. 2026 · Metriken 2.10.0
npm
vaultcompasshq/conductor
Umbrella installer and combined report over the independently installable guardrail gates
MIT14. Sept. 2026 · Metriken 2.10.0
—
G-Research/fsharp-analyzers
Analyzers for F#
Apache-2.07. Sept. 2026 · Metriken 2.10.0
Go
git-pkgs/sarif
Go library for reading, writing, and validating SARIF 2.1.0 logs
MIT8. Sept. 2026 · Metriken 2.10.0
npm
subodhkc/mcp-tenant-isolation
Static analysis scanner for multi-tenant SaaS and MCP server code. 57 deterministic rules for cross-tenant data leakage, IDOR, RLS, and MCP-specific risks. Includes MCP server, SARIF output, and GitHub Action.
MIT20. Sept. 2026 · Metriken 2.10.0
Go
SVGreg/surfaceguard
Know what you're letting in — scans, signs and verifies what an agent loads. Agent Skills vs the OWASP Agentic Skills Top 10, with SARIF output and a load-time gate.
Apache-2.014. Sept. 2026 · Metriken 2.10.0