Repositories list

• codeql-sap-js

  Public

  advanced-security/codeql-sap-js’s past year of commit activity
  CodeQL models for SAP JavaScript frameworks CAP, UI5 and XSJS

  TypeScript

  •

  MIT License

  •44 forks•66 stars•1010 issues•22 pull requests•Updated Apr 18, 2026Apr 18, 2026

• codeql-development-mcp-server

  Public

  advanced-security/codeql-development-mcp-server’s past year of commit activity
  LLM <-- MCP --> CodeQL( AST | CFG | CLI | LSP )

  mcpstatic-analysisast+ 6

  mcpstatic-analysisastcode-qualitycfglspcode-securitycodeqlcopilot-enabled

  TypeScript

  •

  Other

  •22 forks•1717 stars•66 issues•22 pull requests•Updated Apr 18, 2026Apr 18, 2026

• advanced-security-material

  Public
  securitycode-scanningcodeql+ 2

  securitycode-scanningcodeqladvanced-securityadvanced-security-training

  Shell

  •2626 forks•7777 stars•22 issues•55 pull requests•Updated Apr 17, 2026Apr 17, 2026

• sample-javascript-monorepo

  Public
  Detached fork of babel/babel to use as a TypeScript monorepo sample with 150+ packages using the monorepo-code-scanning-action https://github.com/advanced-secu…

  TypeScript

  •

  MIT License

  •11 fork•00 stars•00 issues•66 pull requests•Updated Apr 17, 2026Apr 17, 2026

• dependabot-kev-action

  Public

  advanced-security/dependabot-kev-action’s past year of commit activity
  Action to detect if any open Dependabot alerts are in the CISA Known Exploited Vulnerabilities (KEV) Catalog of CVEs and fail the workflow.

  PowerShell

  •

  MIT License

  •33 forks•88 stars•22 issues•11 pull request•Updated Apr 16, 2026Apr 16, 2026

• GSSAR

  Public
  GitHub Secret Scanning Auto Remediator (GSSAR)

  githubjavascriptaws+ 3

  githubjavascriptawstypescriptremediationsecret-scanning

  TypeScript

  •

  MIT License

  •1111 forks•4848 stars•33 issues•44 pull requests•Updated Apr 15, 2026Apr 15, 2026

• secret-scanning-tools

  Public
  Testing Suite for GitHub Secret Scanning Custom Patterns

  secret-scanninggithub-advanced-security

  secret-scanninggithub-advanced-security

  Python

  •

  MIT License

  •22 forks•88 stars•00 issues•77 pull requests•Updated Apr 15, 2026Apr 15, 2026

• codeql-sarif-security-standard-annotator

  Public

  advanced-security/codeql-sarif-security-standard-annotator’s past year of commit activity
  Compare a CodeQL SARIF results file to a security standard CWE list and annotate the SARIF rules with a tag to highlight results applicable to the security stan…

  TypeScript

  •

  MIT License

  •11 fork•1010 stars•11 issue•22 pull requests•Updated Apr 15, 2026Apr 15, 2026

• maven-dependency-submission-action

  Public

  advanced-security/maven-dependency-submission-action’s past year of commit activity
  GitHub Action for submitting Maven dependencies

  TypeScript

  •

  MIT License

  •3737 forks•5858 stars•1515 issues•44 pull requests•Updated Apr 15, 2026Apr 15, 2026

• security-report-action

  Public

  advanced-security/security-report-action’s past year of commit activity
  GitHub Action that can generate reports from GitHub Advanced Security and dependency vulnerability findings

  HTML

  •

  MIT License

  •00 forks•33 stars•22 issues•33 pull requests•Updated Apr 15, 2026Apr 15, 2026

• codeql-scanner-vscode

  Public

  advanced-security/codeql-scanner-vscode’s past year of commit activity
  CodeQL Plugin for VSCode to help scan and view alerts in code

  TypeScript

  •

  MIT License

  •22 forks•55 stars•11 issue•44 pull requests•Updated Apr 15, 2026Apr 15, 2026

• codeql-development-toolkit

  Public
  The CodeQL Development toolkit is a tool for making common CodeQL development workflows easier.

  C#

  •

  MIT License

  •33 forks•99 stars•1111 issues•33 pull requests•Updated Apr 15, 2026Apr 15, 2026

• teams-secret-scanning-notifier-azure-function

  Public
  Microsoft Teams notifier for Secret Scanning alerts from GitHub Advanced Security, using a GitHub App and Azure Function

  github-appsecurity-teamazure-function+ 3

  github-appsecurity-teamazure-functionsecret-scanninggithub-advanced-securitymicrosoft-teams-bot

  TypeScript

  •

  MIT License

  •11 fork•88 stars•11 issue•00 pull requests•Updated Apr 15, 2026Apr 15, 2026

• slack-secret-scanning-notifier-azure-function

  Public
  Slack notifier for Secret Scanning alerts from GitHub Advanced Security, using a GitHub App and Azure Function

  slack-botsecret-scanninggithub-advanced-security

  slack-botsecret-scanninggithub-advanced-security

  TypeScript

  •

  MIT License

  •22 forks•33 stars•33 issues•00 pull requests•Updated Apr 15, 2026Apr 15, 2026

• awesome-secret-scanning

  Public
  A curated list of awesome GitHub Advanced Security secret scanning resources.

  awesome-listsecret-scanninggithub-advanced-security

  awesome-listsecret-scanninggithub-advanced-security

  PowerShell

  •

  MIT License

  •44 forks•1515 stars•11 issue•00 pull requests•Updated Apr 15, 2026Apr 15, 2026

• policy-as-code

  Public
  GitHub Advanced Security Policy as Code

  Python

  •

  MIT License

  •2121 forks•9898 stars•99 issues•55 pull requests•Updated Apr 14, 2026Apr 14, 2026

• component-detection-dependency-submission-action

  Public
  This GitHub Action runs the microsoft/component-detection library to automate dependency extraction at build time.

  github-actions

  github-actions

  TypeScript

  •

  MIT License

  •3030 forks•2020 stars•44 issues•44 pull requests•Updated Apr 14, 2026Apr 14, 2026

• dismiss-alerts

  Public
  Dismiss GitHub Code Scanning alerts from SARIF suppression data

  sarifcode-scanningsast+ 3

  sarifcode-scanningsastcode-securityghasgithub-advanced-security

  Java

  •

  MIT License

  •44 forks•2121 stars•22 issues•88 pull requests•Updated Apr 14, 2026Apr 14, 2026

• ghe-cross-instance-committers

  Public
  A script which will return the total number of unique de-deuped active committers across multiple GHES instances

  ghas

  ghas

  TypeScript

  •

  MIT License

  •55 forks•66 stars•22 issues•99 pull requests•Updated Apr 14, 2026Apr 14, 2026

• spdx-dependency-submission-action

  Public
  upload an SPDX 2.2 formatted SBOM to GitHub's dependency submission API

  JavaScript

  •

  MIT License

  •66 forks•2424 stars•44 issues•44 pull requests•Updated Apr 14, 2026Apr 14, 2026

• ghas-api-python-scripts

  Public
  GitHub Advanced Security scripts to interact with parts of the API, driven by a lightweight GitHub API wrapper written in Python

  Python

  •

  MIT License

  •00 forks•55 stars•00 issues•11 pull request•Updated Apr 14, 2026Apr 14, 2026

• codeql-extractor-action

  Public
  specify a CodeQL extractor to be used in your workflows as an author of an Extractor.

  Rust

  •

  MIT License

  •00 forks•22 stars•11 issue•1111 pull requests•Updated Apr 14, 2026Apr 14, 2026

• secret-scanning-review-action

  Public
  Action to detect if a secret is initially detected in a pull request

  PowerShell

  •

  MIT License

  •77 forks•2020 stars•44 issues•66 pull requests•Updated Apr 13, 2026Apr 13, 2026

• reusable-workflows

  Public
  Advanced Security Reusable GitHub Actions Workflows

  MIT License

  •66 forks•33 stars•44 issues•66 pull requests•Updated Apr 13, 2026Apr 13, 2026

• codeql-development-template

  Public template
  Copilot-native repository template for CodeQL query development

  CodeQL

  •

  MIT License

  •00 forks•99 stars•11 issue•33 pull requests•Updated Apr 13, 2026Apr 13, 2026

• codeql-extractor-iac

  Public

  advanced-security/codeql-extractor-iac’s past year of commit activity
  CodeQL Extractor, Library, and Queries for Infrastructure as Code

  CodeQL

  •

  MIT License

  •1212 forks•5959 stars•1313 issues•55 pull requests•Updated Apr 13, 2026Apr 13, 2026

• ghas-reviewer-app

  Public
  GitHub Advanced Security Pull Request Security Team required review GitHub App

  github-appadvanced-security

  github-appadvanced-security

  Python

  •

  MIT License

  •1111 forks•3636 stars•66 issues•44 pull requests•Updated Apr 13, 2026Apr 13, 2026

• dependabot-version-updates

  Public

  advanced-security/dependabot-version-updates’s past year of commit activity
  Java

  •

  GNU General Public License v3.0

  •22 forks•00 stars•00 issues•00 pull requests•Updated Apr 10, 2026Apr 10, 2026

• secret-scanning-notifications

  Public
  A GitHub Action that sends email notifications to security manager team for any new or resolved secret scanning alerts based on a set frequency

  TypeScript

  •

  MIT License

  •33 forks•11 star•00 issues•1313 pull requests•Updated Apr 10, 2026Apr 10, 2026

• SARIF-viewer

  Public

  advanced-security/SARIF-viewer’s past year of commit activity
  JetBrains IDE plugin for displaying SARIF from GHAS or from a local file

  Kotlin

  •

  MIT License

  •55 forks•99 stars•33 issues•66 pull requests•Updated Apr 9, 2026Apr 9, 2026