github-security

Github native application for organisations; uses OpenAI models to identify Security Risks introduced by PRs

Personal security gate — scan for secrets, CVEs, and risk signals before you push or use a repo

GitHub contribution calendar for the past 30 days, providing a visual representation of your GitHub activity.

Defensive repository security review agent specification for safe pre-installation code and supply-chain inspection.

Agent Skill for safely enabling GitHub's six recommended repository security controls

🔒 Real-time secret detection for VS Code - Scan code for AWS, GitHub, Stripe, Slack credentials and 40+ more patterns. Privacy-first, local processing.

npm supply-chain worm detector (Shai-Hulud / ChainDrop). Finds the dead man’s switch BEFORE you revoke your tokens. One bash file, no dependencies, no network. — Détecteur de ver npm : trouve le veilleur AVANT que vous ne révoquiez vos jetons.

Offline CLI for Markdown and JSON security posture reports from local fixtures. Includes deterministic risk ratings and collection completeness.

Educational C# project demonstrating GitHub security, SSH, GPG signing, secret scanning and SonarQube analysis.

Security monitoring toolkit for OpenClaw agents. Automated security checks, SSL monitoring, GitHub audits, credential rotation tracking, and breach monitoring.

Building multiple CI CD pipleines for a basic react application

Demonstrative repository of DevSecOps for the Epitech MSC T-NSA-800 project.

Advanced Secrets & API Key Scanner - Protect Your Code, Protect Your Business

A secure, user-friendly Flutter Rotational Password Dialer for GitHub. This dialer replaces typing with a rotating interface to reduce security risks, offering a customizable and intuitive way to enter passwords.

A Go client for the GitHub Global Security Advisories API, a public feed of security advisories that affect open source ecosystems (npm, Maven, Go, etc.). This package allows you to list and retrieve advisory metadata without authentication (public data only).

Passive trust-vetting for GitHub invites and forks: account triage, fork-divergence analysis, safe artifact triage. Never executes.

Pre-clone security screening for GitHub repos using Claude.ai web. Decide if a repo is safe before downloading.

This is going to be a customized script for searching through people's gh repos for creds, personal info, keys, etc.

GitHub Action for scanning public repositories for secrets, dangerous code patterns, dependency risks, and security configuration issues.

Cloud-hosted Betterleaks for GitHub and S3 secret scanning with live vendor-API validation. Apify actor.