npm
github/codeql-action
Actions for running CodeQL analysis
MIT12 sept 2026 · métricas 2.10.0
Todas las etiquetas
Etiqueta del catálogo
#code-scanning
Todos los repositorios del registro público que llevan esta etiqueta, procedente de sus topics de GitHub o de las palabras clave que publican sus registros de paquetes. La salud se mide con la misma metodología versionada que el resto del registro.
11 registros
PyPI · crates.io
duriantaco/skylos
Open source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first timers refer to https://duriantaco.github.io/skylos/repo-map/
Apache-2.015 sept 2026 · métricas 2.10.0
PyPI
cpeoples/ansible-security-scanner
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
Apache-2.09 sept 2026 · métricas 2.10.0
Packagist
laminas/laminas-code
Extensions to the PHP Reflection API, static code scanning, and code generation
BSD-3-Clause27 ago 2026 · métricas 2.10.0
Go
draugr-dev/draugr
Run Trivy, Semgrep, Gitleaks and more from one file. Consolidates SAST, SCA, secrets, IaC and container findings into one SARIF report and one pass/fail gate for CI — ranked by real risk, and can fail a PR on new findings only.
Apache-2.011 sept 2026 · métricas 2.10.0
PyPI
justinchuby/lintrunner-adapters
Adapters and tools for lintrunner
Licencia propia12 sept 2026 · métricas 2.10.0
npm
vaultcompasshq/conductor
Umbrella installer and combined report over the independently installable guardrail gates
MIT14 sept 2026 · métricas 2.10.0
—
G-Research/fsharp-analyzers
Analyzers for F#
Apache-2.07 sept 2026 · métricas 2.10.0
Go
git-pkgs/sarif
Go library for reading, writing, and validating SARIF 2.1.0 logs
MIT8 sept 2026 · métricas 2.10.0
npm
subodhkc/mcp-tenant-isolation
Static analysis scanner for multi-tenant SaaS and MCP server code. 57 deterministic rules for cross-tenant data leakage, IDOR, RLS, and MCP-specific risks. Includes MCP server, SARIF output, and GitHub Action.
MIT20 sept 2026 · métricas 2.10.0
Go
SVGreg/surfaceguard
Know what you're letting in — scans, signs and verifies what an agent loads. Agent Skills vs the OWASP Agentic Skills Top 10, with SARIF output and a load-time gate.
Apache-2.014 sept 2026 · métricas 2.10.0