Every tool your GitHub workflow needs
Browse and install the best GitHub Apps and integrations for code review, CI/CD, security, and project management — all in one place.
GitGuardian
GitGuardian is a secrets detection app for GitHub that scans pull requests and repositories for hardcoded credentials before they reach production. Detects 450+ types of hardcoded secrets Scans every pull request and commit automatically Flags API keys and credentials before merge Guides remediation once a secret is exposed
Socket Security
Socket Security protects GitHub repositories from malicious, typosquatted, and vulnerable open source packages by scanning 70+ supply chain risk signals. Scans 70+ supply chain risk signals Flags typosquatted and malicious packages Reviews dependency updates before merge Alerts on suspicious install-time behavior
StepSecurity Actions Security
StepSecurity hardens GitHub Actions runners to stop CI/CD supply chain attacks, monitoring workflow behavior in real time. Detects anomalous outbound network calls Enforces least-privilege workflow permissions Hardens runners against supply chain attacks Flags risky changes to Actions workflows
Snyk
Snyk finds, fixes, and prevents known vulnerabilities across custom code, open source dependencies, containers, and infrastructure configs on every GitHub repo. Scans code, dependencies, and containers Opens automated fix pull requests Checks infrastructure-as-code configurations Monitors every repo for new vulnerabilities
Semgrep
Semgrep is a static analysis app for GitHub that scans every commit with 2,000+ built-in rules to catch bugs and reachable vulnerabilities. Scans commits with 2,000+ built-in rules Flags reachable dependency vulnerabilities Covers 10+ programming languages Enforces custom coding standards on every PR
Showing 1–5 of 5 apps