{"payload":{"featured":[],"recommended":[],"recentlyAdded":[],"searchResults":{"results":[{"bgColor":"e4f2f5","copilotApp":false,"documentationUrl":"https://docs.securesauce.dev/","extendedDescription":null,"fullDescription":"Precaution is a static application security testing (SAST) tool designed to tightly integrate into your GitHub\ndevelopment workflow. Each time a pull request is opened, Precaution runs its static analyzers on the code changes to\ndetect potential security vulnerabilities. Every effort is made to be as accurate as possible to avoid noisy false\npositives.\n","id":12891,"installationCount":61,"isVerifiedOwner":true,"listingLogoUrl":"https://avatars.githubusercontent.com/ml/12891?s=400&v=4","name":"Precaution","ownerLogin":"securesauce","pricingUrl":null,"primaryCategory":"Security","privacyPolicyUrl":"https://www.securesauce.dev/privacy","secondaryCategory":"Code review","shortDescription":"Find and fix potential security vulnerabilities in your code","slug":"precaution","statusUrl":"https://securesauce.github.io/status/","supportUrl":"support@securesauce.dev","tosUrl":"https://www.securesauce.dev/terms","type":"marketplace_listing"},{"bgColor":"ffffff","copilotApp":false,"documentationUrl":"https://docs.threatrix.io/","extendedDescription":null,"fullDescription":"Graduate To Threatrix\n\nThreatrix is the first-to-market, cost-effective solution, providing continual license compliance and automated\nsecurity, allowing organizations to determine their exposure to open source risks with one solution. Actionable results\ndrive measurable reductions in risk, saving organizations developer time and costly remediation efforts for compliance\nteams.\n\nThreatrix provides hyper-accurate, audit quality results with its first-to-market technology.\n","id":13233,"installationCount":38,"isVerifiedOwner":true,"listingLogoUrl":"https://avatars.githubusercontent.com/ml/13233?s=400&v=4","name":"Threatrix","ownerLogin":"threatrix","pricingUrl":null,"primaryCategory":"Security","privacyPolicyUrl":"https://threatrix.io/privacy","secondaryCategory":"Dependency management","shortDescription":"Audit quality, snippet level, open source security and license compliance in build-time with auto-remediation","slug":"threatrix","statusUrl":"","supportUrl":"support@threatrix.io","tosUrl":"https://threatrix.io/terms","type":"marketplace_listing"},{"bgColor":"fbfafb","copilotApp":false,"documentationUrl":"https://docs.pixee.ai","extendedDescription":null,"fullDescription":"Code security is complex work. Let Pixeebot handle it for you.\n\nPixeebot currently supports Java and Python. Install now to get on the waitlist for future languages. ✨ AI features\nenabled by default. Learn more.\n\nJust as Dependabot keeps your dependencies up to date, Pixeebot helps ensure your code is - and stays - secure. Pixeebot\nimmediately starts monitoring your repository and makes suggestions that are easy for your team to absorb.\n","id":16019,"installationCount":1729,"isVerifiedOwner":true,"listingLogoUrl":"https://avatars.githubusercontent.com/ml/16019?s=400&v=4","name":"Pixeebot | Automated code fixes.","ownerLogin":"pixee","pricingUrl":null,"primaryCategory":"AI Assisted","privacyPolicyUrl":"https://pixee.ai/privacy","secondaryCategory":"Security","shortDescription":"Your Automated Product Security Engineer","slug":"pixeebot-automated-code-fixes","statusUrl":"https://docs.pixee.ai/status","supportUrl":"https://docs.pixee.ai","tosUrl":"https://pixee.ai/terms","type":"marketplace_listing"},{"bgColor":"000000","copilotApp":false,"documentationUrl":"","extendedDescription":null,"fullDescription":"Golang Code Scanner\n\nThe Golang Code Scanner is a app designed to enhance the security of your Golang codebase by scanning for\nvulnerabilities. It automatically analyzes your Golang code whenever you push changes to the master branch or create a\npull request targeting the master or main branch. Upon detecting vulnerabilities, it adds a comment to the created pull\nrequest, thereby facilitating timely resolution of security issues.\n","id":17864,"installationCount":2,"isVerifiedOwner":true,"listingLogoUrl":"https://avatars.githubusercontent.com/ml/17864?s=400&v=4","name":"Golang Code Scanner","ownerLogin":"Armur-Ai","pricingUrl":null,"primaryCategory":"Code quality","privacyPolicyUrl":"https://www.armur.ai/privacy-policy","secondaryCategory":"Security","shortDescription":"Automated vulnerability Scanner","slug":"golang-code-scanner","statusUrl":"","supportUrl":"https://www.armur.ai/contact","tosUrl":"","type":"marketplace_listing"},{"type":"repository_action","id":"100611","name":"Add Secure Code Warrior contextual training to SARIF","free":null,"primary_category":"Security","secondary_category":"Learning","is_verified_owner":true,"slug":"add-secure-code-warrior-contextual-training-to-sarif","owner_login":"SecureCodeWarrior","resource_path":"/marketplace/actions/add-secure-code-warrior-contextual-training-to-sarif","highlights":{"description":"","name.ngram":""},"description":"Add contextual application security training to SARIF files, providing links to secure coding exercises and explainer\nvideos\n","stars":21,"dependents_count":60,"icon_svg":"\n \n\n","repository_action":{"repository_action":{"id":100611,"path":"action.yml","name":"Add Secure Code Warrior contextual training to SARIF","description":"Add contextual application security training to SARIF files, providing links to secure coding exercises and explainer videos","icon_name":"shield","color":"f66a0a","featured":false,"repository_id":298133134,"rank_multiplier":1.0,"slug":"add-secure-code-warrior-contextual-training-to-sarif","security_email":"cwong@securecodewarrior.com"}}},{"type":"repository_action","id":"805478","name":"secret-scanning-custom-action","free":null,"primary_category":"Security","secondary_category":"Testing","is_verified_owner":true,"slug":"secret-scanning-custom-action","owner_login":"advanced-security","resource_path":"/marketplace/actions/secret-scanning-custom-action","highlights":{"description":"","name.ngram":""},"description":"Testing Suite for GitHub Secret Scanning Custom Patterns\n","stars":1,"dependents_count":2,"icon_svg":"\n \n\n","repository_action":{"repository_action":{"id":805478,"path":"action.yml","name":"secret-scanning-custom-action","description":"Testing Suite for GitHub Secret Scanning Custom Patterns","icon_name":"shield","color":"0366d6","featured":false,"repository_id":564779171,"rank_multiplier":1.0,"slug":"secret-scanning-custom-action","security_email":"aegilops@github.com"}}},{"type":"repository_action","id":"237714","name":"SOOS Core SCA","free":null,"primary_category":"Security","secondary_category":"Dependency management","is_verified_owner":true,"slug":"soos-core-sca","owner_login":"soos-io","resource_path":"/marketplace/actions/soos-core-sca","highlights":{"description":"","name.ngram":""},"description":"Execute SOOS SCA analysis using your remote SOOS configuration\n","stars":13,"dependents_count":35,"icon_svg":"\n\n\n\n\n\t\n\t\t\n\t\t\n\t\n\n\n","repository_action":{"repository_action":{"id":237714,"path":"action.yml","name":"SOOS Core SCA","description":"Execute SOOS SCA analysis using your remote SOOS configuration","icon_name":"alert-triangle","color":"ffffff","featured":false,"repository_id":391060504,"rank_multiplier":1.0,"slug":"soos-core-sca","security_email":"integrations@soos.io"}}},{"type":"repository_action","id":"1000904","name":"StackQL Studios - StackQL Assert","free":null,"primary_category":"Continuous integration","secondary_category":"Security","is_verified_owner":true,"slug":"stackql-studios-stackql-assert","owner_login":"stackql","resource_path":"/marketplace/actions/stackql-studios-stackql-assert","highlights":{"description":"","name.ngram":""},"description":"Run StackQL query to test and audit your infrastructure\n","stars":6,"dependents_count":1,"icon_svg":"\n \n \n\n","repository_action":{"repository_action":{"id":1000904,"path":"action.yml","name":"StackQL Studios - StackQL Assert","description":"Run StackQL query to test and audit your infrastructure","icon_name":"terminal","color":"28a745","featured":false,"repository_id":598581015,"rank_multiplier":1.0,"slug":"stackql-studios-stackql-assert","security_email":"javen@stackql.io"}}},{"type":"repository_action","id":"1242739","name":"ci-driven-scan-github-action","free":null,"primary_category":"Security","secondary_category":"Testing","is_verified_owner":true,"slug":"ci-driven-scan-github-action","owner_login":"PortSwigger","resource_path":"/marketplace/actions/ci-driven-scan-github-action","highlights":{"description":"","name.ngram":""},"description":"Runs an Enterprise scan against a target site\n","stars":7,"dependents_count":3,"icon_svg":"\n\n \n \n\n","repository_action":{"repository_action":{"id":1242739,"path":"action.yaml","name":"ci-driven-scan-github-action","description":"Runs an Enterprise scan against a target site","icon_name":"activity","color":"ffffff","featured":false,"repository_id":643970382,"rank_multiplier":1.0,"slug":"ci-driven-scan-github-action","security_email":"ben.smith@portswigger.net"}}},{"type":"repository_action","id":"784685","name":"sigstore-conformance","free":null,"primary_category":"Security","secondary_category":"Testing","is_verified_owner":true,"slug":"sigstore-conformance","owner_login":"sigstore","resource_path":"/marketplace/actions/sigstore-conformance","highlights":{"description":"","name.ngram":""},"description":"Conformance testing for Sigstore clients\n","stars":7,"dependents_count":9,"icon_svg":null,"repository_action":{"repository_action":{"id":784685,"path":"action.yml","name":"sigstore-conformance","description":"Conformance testing for Sigstore clients","icon_name":null,"color":"ffd33d","featured":false,"repository_id":541893186,"rank_multiplier":1.0,"slug":"sigstore-conformance","security_email":"william@trailofbits.com"}}},{"type":"repository_action","id":"275912","name":"SpiceDB Test Server","free":null,"primary_category":"Security","secondary_category":"Testing","is_verified_owner":true,"slug":"spicedb-test-server","owner_login":"authzed","resource_path":"/marketplace/actions/spicedb-test-server","highlights":{"description":"","name.ngram":""},"description":"Sets up a running instance of spicedb serve-testing for integration tests\n","stars":8,"dependents_count":18,"icon_svg":null,"repository_action":{"repository_action":{"id":275912,"path":"action.yml","name":"SpiceDB Test Server","description":"Sets up a running instance of `spicedb serve-testing` for integration tests","icon_name":null,"color":"ffffff","featured":false,"repository_id":412197047,"rank_multiplier":1.0,"slug":"spicedb-test-server","security_email":"jimmy@zelinskie.com"}}},{"type":"repository_action","id":"532937","name":"Boost Security Scanner","free":null,"primary_category":"Security","secondary_category":null,"is_verified_owner":true,"slug":"boost-security-scanner","owner_login":"boostsecurityio","resource_path":"/marketplace/actions/boost-security-scanner","highlights":{"description":"","name.ngram":""},"description":"Scans a repository for security vulneratibilities\n","stars":4,"dependents_count":498,"icon_svg":null,"repository_action":{"repository_action":{"id":532937,"path":"action.yaml","name":"Boost Security Scanner","description":"Scans a repository for security vulneratibilities","icon_name":null,"color":"24292e","featured":false,"repository_id":496601776,"rank_multiplier":1.0,"slug":"boost-security-scanner","security_email":"support@boostsecurity.io"}}},{"type":"repository_action","id":"470722","name":"GitHub Advanced Security API to CSV","free":null,"primary_category":"Security","secondary_category":"Reporting","is_verified_owner":true,"slug":"github-advanced-security-api-to-csv","owner_login":"advanced-security","resource_path":"/marketplace/actions/github-advanced-security-api-to-csv","highlights":{"description":"","name.ngram":""},"description":"Grab code and secret scanning data from the GitHub Advanced Security API and put it into a CSV file\n","stars":29,"dependents_count":17,"icon_svg":"\n \n \n \n \n \n \n \n\n","repository_action":{"repository_action":{"id":470722,"path":"action.yml","name":"GitHub Advanced Security API to CSV","description":"Grab code and secret scanning data from the GitHub Advanced Security API and put it into a CSV file","icon_name":"cloud-drizzle","color":"6f42c1","featured":false,"repository_id":479213922,"rank_multiplier":1.0,"slug":"github-advanced-security-api-to-csv","security_email":"aegilops@github.com"}}},{"type":"repository_action","id":"1671557","name":"central-login","free":null,"primary_category":"Continuous integration","secondary_category":"Security","is_verified_owner":true,"slug":"central-login","owner_login":"stackrox","resource_path":"/marketplace/actions/central-login","highlights":{"description":"","name.ngram":""},"description":"A GitHub Action to configure login credentials for an ACS Central instance for use in subsequent steps\n","stars":1,"dependents_count":5,"icon_svg":"\n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n\n","repository_action":{"repository_action":{"id":1671557,"path":"action.yml","name":"central-login","description":"A GitHub Action to configure login credentials for an ACS Central instance for use in subsequent steps","icon_name":null,"color":"ffffff","featured":false,"repository_id":712687633,"rank_multiplier":1.0,"slug":"central-login","security_email":"secalert@redhat.com"}}},{"type":"repository_action","id":"601985","name":"Sync Tailscale ACLs","free":null,"primary_category":"Security","secondary_category":null,"is_verified_owner":true,"slug":"sync-tailscale-acls","owner_login":"tailscale","resource_path":"/marketplace/actions/sync-tailscale-acls","highlights":{"description":"","name.ngram":""},"description":"Push changes to Tailscale and run ACL tests in CI\n","stars":72,"dependents_count":37,"icon_svg":"\n \n \n \n \n \n \n \n \n \n \n \n\n","repository_action":{"repository_action":{"id":601985,"path":"action.yml","name":"Sync Tailscale ACLs","description":"Push changes to Tailscale and run ACL tests in CI","icon_name":null,"color":"ffffff","featured":false,"repository_id":514004903,"rank_multiplier":1.0,"slug":"sync-tailscale-acls","security_email":"security@tailscale.com"}}},{"type":"repository_action","id":"2210146","name":"Setup HashiCorp Boundary","free":null,"primary_category":"Deployment","secondary_category":"Security","is_verified_owner":true,"slug":"setup-hashicorp-boundary","owner_login":"hashicorp","resource_path":"/marketplace/actions/setup-hashicorp-boundary","highlights":{"description":"","name.ngram":""},"description":"A GitHub Action to install a specific version of HashiCorp Boundary and add it to PATH\n","stars":2,"dependents_count":null,"icon_svg":"","repository_action":{"repository_action":{"id":2210146,"path":"action.yml","name":"Setup HashiCorp Boundary","description":"A GitHub Action to install a specific version of HashiCorp Boundary and add it to PATH","icon_name":"unlock","color":"ffffff","featured":false,"repository_id":790733046,"rank_multiplier":1.0,"slug":"setup-hashicorp-boundary","security_email":"security@hashicorp.com"}}},{"type":"repository_action","id":"2088544","name":"SonarQube Scan for C and C++","free":null,"primary_category":"Security","secondary_category":"Code quality","is_verified_owner":true,"slug":"sonarqube-scan-for-c-and-c","owner_login":"SonarSource","resource_path":"/marketplace/actions/sonarqube-scan-for-c-and-c","highlights":{"description":"","name.ngram":""},"description":"Scan your C and C++ code with SonarQube to detect bugs, vulnerabilities and code smells\n","stars":1,"dependents_count":12,"icon_svg":"\n\n\n\n\n\n","repository_action":{"repository_action":{"id":2088544,"path":"action.yml","name":"SonarQube Scan for C and C++","description":"Scan your C and C++ code with SonarQube to detect bugs, vulnerabilities and code smells","icon_name":"check","color":"ffffff","featured":false,"repository_id":773915159,"rank_multiplier":1.0,"slug":"sonarqube-scan-for-c-and-c","security_email":"analysis.experience@sonarsource.com"}}},{"type":"repository_action","id":"375826","name":"Rapid7 InsightAppSec Scan","free":null,"primary_category":"Continuous integration","secondary_category":"Security","is_verified_owner":true,"slug":"rapid7-insightappsec-scan","owner_login":"rapid7","resource_path":"/marketplace/actions/rapid7-insightappsec-scan","highlights":{"description":"","name.ngram":""},"description":"The Rapid7 InsightAppSec Scan action allows application and security teams to embed DAST into build and release\npipelines.\n","stars":8,"dependents_count":4,"icon_svg":"\n\n\n\n\n\n","repository_action":{"repository_action":{"id":375826,"path":"action.yaml","name":"Rapid7 InsightAppSec Scan","description":"The Rapid7 InsightAppSec Scan action allows application and security teams to embed DAST into build and release pipelines.\n","icon_name":null,"color":"ffffff","featured":false,"repository_id":450473591,"rank_multiplier":1.0,"slug":"rapid7-insightappsec-scan","security_email":"mark_freebairn@rapid7.com"}}},{"type":"repository_action","id":"1652355","name":"42Crunch REST API Static Security Testing - Freemium","free":null,"primary_category":"Security","secondary_category":"Code Scanning Ready","is_verified_owner":true,"slug":"42crunch-rest-api-static-security-testing-freemium","owner_login":"42Crunch","resource_path":"/marketplace/actions/42crunch-rest-api-static-security-testing-freemium","highlights":{"description":"","name.ngram":""},"description":"The REST API Static Security Testing action adds automatic static API security testing (SAST) to your workflows\n","stars":2,"dependents_count":13,"icon_svg":"","repository_action":{"repository_action":{"id":1652355,"path":"action.yaml","name":"42Crunch REST API Static Security Testing - Freemium","description":"The REST API Static Security Testing action adds automatic static API security testing (SAST) to your workflows","icon_name":"eye","color":"ffffff","featured":false,"repository_id":706125791,"rank_multiplier":1.0,"slug":"42crunch-rest-api-static-security-testing-freemium","security_email":"security@42crunch.com"}}},{"type":"repository_action","id":"1037393","name":"defectdojo import report","free":null,"primary_category":"Security","secondary_category":"Testing","is_verified_owner":true,"slug":"defectdojo-import-report","owner_login":"portswigger-cloud","resource_path":"/marketplace/actions/defectdojo-import-report","highlights":{"description":"","name.ngram":""},"description":"a github action that sends scan reports to a DefectDojo instance\n","stars":0,"dependents_count":6,"icon_svg":"\n \n\n","repository_action":{"repository_action":{"id":1037393,"path":"action.yaml","name":"defectdojo import report","description":"a github action that sends scan reports to a DefectDojo instance","icon_name":"shield","color":"f66a0a","featured":false,"repository_id":607133878,"rank_multiplier":1.0,"slug":"defectdojo-import-report","security_email":"ben.smith@portswigger.net"}}}],"total":429,"totalPages":22},"categories":{"apps":[{"name":"API management","slug":"api-management","description_html":"

Structure your API infrastructure to enable various internet gateways to interact with your service.

\n"},{"name":"Backup Utilities","slug":"backup-utilities","description_html":"

Utilities providing periodic backups of your GitHub data

\n"},{"name":"Chat","slug":"chat","description_html":"

Bring GitHub into your conversations.

\n"},{"name":"Code quality","slug":"code-quality","description_html":"

Automate your code review with style, quality, security, and test‑coverage checks when you need them.

\n"},{"name":"Code review","slug":"code-review","description_html":"

Ensure your code meets quality standards and ship with confidence.

\n"},{"name":"Container CI","slug":"container-ci","description_html":"

Continuous integration for container applications.

\n"},{"name":"Continuous integration","slug":"continuous-integration","description_html":"

Automatically build and test your code as you push it to GitHub, preventing bugs from being deployed to production.

\n"},{"name":"Dependency management","slug":"dependency-management","description_html":"

Secure and manage your third-party dependencies.

\n"},{"name":"Deployment","slug":"deployment","description_html":"

Streamline your code deployment so you can focus on your product.

\n"},{"name":"Deployment Protection Rules","slug":"deployment-protection-rules","description_html":"

Enables custom protection rules to gate deployments with third-party services

\n"},{"name":"Game CI","slug":"game-ci","description_html":"

Tools for building a CI pipeline for game development

\n"},{"name":"IDEs","slug":"ides","description_html":"

Find the right interface to build, debug, and deploy your source code.

\n"},{"name":"Learning","slug":"learning","description_html":"

Get the skills you need to level up.

\n"},{"name":"Localization","slug":"localization","description_html":"

Extend your software's reach. Localize and translate continuously from GitHub.

\n"},{"name":"Mobile","slug":"mobile","description_html":"

Improve your workflow for the small screen.

\n"},{"name":"Mobile CI","slug":"mobile-ci","description_html":"

Continuous integration for Mobile applications

\n"},{"name":"Monitoring","slug":"monitoring","description_html":"

Monitor the impact of your code changes. Measure performance, track errors, and analyze your application.

\n"},{"name":"Project management","slug":"project-management","description_html":"

Organize, manage, and track your project with tools that build on top of issues and pull requests.

\n"},{"name":"Publishing","slug":"publishing","description_html":"

Get your site ready for production so you can get the word out.

\n"},{"name":"Recently added","slug":"recently-added","description_html":"

The latest tools that help you and your team build software better, together.

\n"},{"name":"Security","slug":"security","description_html":"

Find, fix, and prevent security vulnerabilities before they can be exploited.

\n"},{"name":"Support","slug":"support","description_html":"

Get your team and customers the help they need.

\n"},{"name":"Testing","slug":"testing","description_html":"

Eliminate bugs and ship with more confidence by adding these tools to your workflow.

\n"},{"name":"Utilities","slug":"utilities","description_html":"

Auxiliary tools to enhance your experience on GitHub

\n"}],"actions":[{"name":"API management","slug":"api-management","description_html":"

Structure your API infrastructure to enable various internet gateways to interact with your service.

\n"},{"name":"Backup Utilities","slug":"backup-utilities","description_html":"

Utilities providing periodic backups of your GitHub data

\n"},{"name":"Chat","slug":"chat","description_html":"

Bring GitHub into your conversations.

\n"},{"name":"Code quality","slug":"code-quality","description_html":"

Automate your code review with style, quality, security, and test‑coverage checks when you need them.

\n"},{"name":"Code review","slug":"code-review","description_html":"

Ensure your code meets quality standards and ship with confidence.

\n"},{"name":"Container CI","slug":"container-ci","description_html":"

Continuous integration for container applications.

\n"},{"name":"Continuous integration","slug":"continuous-integration","description_html":"

Automatically build and test your code as you push it to GitHub, preventing bugs from being deployed to production.

\n"},{"name":"Dependency management","slug":"dependency-management","description_html":"

Secure and manage your third-party dependencies.

\n"},{"name":"Deployment","slug":"deployment","description_html":"

Streamline your code deployment so you can focus on your product.

\n"},{"name":"Deployment Protection Rules","slug":"deployment-protection-rules","description_html":"

Enables custom protection rules to gate deployments with third-party services

\n"},{"name":"Game CI","slug":"game-ci","description_html":"

Tools for building a CI pipeline for game development

\n"},{"name":"GitHub Sponsors","slug":"github-sponsors","description_html":"

Tools to manage your GitHub Sponsors community

\n"},{"name":"IDEs","slug":"ides","description_html":"

Find the right interface to build, debug, and deploy your source code.

\n"},{"name":"Learning","slug":"learning","description_html":"

Get the skills you need to level up.

\n"},{"name":"Localization","slug":"localization","description_html":"

Extend your software's reach. Localize and translate continuously from GitHub.

\n"},{"name":"Mobile","slug":"mobile","description_html":"

Improve your workflow for the small screen.

\n"},{"name":"Mobile CI","slug":"mobile-ci","description_html":"

Continuous integration for Mobile applications

\n"},{"name":"Monitoring","slug":"monitoring","description_html":"

Monitor the impact of your code changes. Measure performance, track errors, and analyze your application.

\n"},{"name":"Project management","slug":"project-management","description_html":"

Organize, manage, and track your project with tools that build on top of issues and pull requests.

\n"},{"name":"Publishing","slug":"publishing","description_html":"

Get your site ready for production so you can get the word out.

\n"},{"name":"Security","slug":"security","description_html":"

Find, fix, and prevent security vulnerabilities before they can be exploited.

\n"},{"name":"Support","slug":"support","description_html":"

Get your team and customers the help they need.

\n"},{"name":"Testing","slug":"testing","description_html":"

Eliminate bugs and ship with more confidence by adding these tools to your workflow.

\n"},{"name":"Utilities","slug":"utilities","description_html":"

Auxiliary tools to enhance your experience on GitHub

\n"}]}},"title":"Marketplace"}