sarif-report topic
megalinter
🦙 MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository sources with a GitHub Action, other CI tools or loc...
qodana-action
⚙️ Scan your Go, Java, Kotlin, PHP, Python, JavaScript, TypeScript, .NET projects at GitHub with Qodana. This repository contains Qodana for Azure, GitHub, CircleCI and Gradle
squealer
Telling tales on you for leaking secrets!
npm-groovy-lint
Lint, format and auto-fix your Groovy / Jenkinsfile / Gradle files using command line
qodana-cli
🔧 JetBrains Qodana’s official command line tool
go-sarif
Go library for sarif - Static Analysis Results Interchange Format
crda
Scan your project's dependencies with Code Ready Dependency Analytics
ghaction-container-scan
GitHub Action to check for vulnerabilities in your container image
mix_machine
Machine output for Mix tasks
govulncheck-action
This action uses govulncheck to perform a scan of the code, afterwards it will parse the output and transform it into an Sarif Report, which will be uploaded to Github using the code-scanning API.