npm
github/codeql-action
Actions for running CodeQL analysis
MIT2026年9月12日 · 指标 2.10.0
全部标签
目录标签
#code-scanning
公开记录中带有此标签的全部仓库——标签来自其 GitHub 主题或软件包注册表发布的关键词。健康度量遵循与记录其余部分相同的版本化方法论。
11 条记录
PyPI · crates.io
duriantaco/skylos
Open source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first timers refer to https://duriantaco.github.io/skylos/repo-map/
Apache-2.02026年9月15日 · 指标 2.10.0
PyPI
cpeoples/ansible-security-scanner
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
Apache-2.02026年9月9日 · 指标 2.10.0
Packagist
laminas/laminas-code
Extensions to the PHP Reflection API, static code scanning, and code generation
BSD-3-Clause2026年8月27日 · 指标 2.10.0
Go
draugr-dev/draugr
Run Trivy, Semgrep, Gitleaks and more from one file. Consolidates SAST, SCA, secrets, IaC and container findings into one SARIF report and one pass/fail gate for CI — ranked by real risk, and can fail a PR on new findings only.
Apache-2.02026年9月11日 · 指标 2.10.0
PyPI
justinchuby/lintrunner-adapters
Adapters and tools for lintrunner
自定义许可证2026年9月12日 · 指标 2.10.0
npm
vaultcompasshq/conductor
Umbrella installer and combined report over the independently installable guardrail gates
MIT2026年9月14日 · 指标 2.10.0
—
G-Research/fsharp-analyzers
Analyzers for F#
Apache-2.02026年9月7日 · 指标 2.10.0
Go
git-pkgs/sarif
Go library for reading, writing, and validating SARIF 2.1.0 logs
MIT2026年9月8日 · 指标 2.10.0
npm
subodhkc/mcp-tenant-isolation
Static analysis scanner for multi-tenant SaaS and MCP server code. 57 deterministic rules for cross-tenant data leakage, IDOR, RLS, and MCP-specific risks. Includes MCP server, SARIF output, and GitHub Action.
MIT2026年9月20日 · 指标 2.10.0
Go
SVGreg/surfaceguard
Know what you're letting in — scans, signs and verifies what an agent loads. Agent Skills vs the OWASP Agentic Skills Top 10, with SARIF output and a load-time gate.
Apache-2.02026年9月14日 · 指标 2.10.0