Enhance your workflow with extensions
Tools from the community and partners to simplify tasks and automate processes
Security apps
Find, fix, and prevent security vulnerabilities before they can be exploited.
GitGuardian
AppThe #1 GitHub Security App – Find and fix hardcoded secrets in your GitHub repositories
Snyk
AppFind, fix (and prevent!) known vulnerabilities in your code
SonarCloud
AppEmpowering developers to detect Security Vulnerabilities, Bugs, and Code Smells in pull requests and repositories
Renovate
AppDependency Automation service by Mend.io
Semgrep
AppCode scanning at ludicrous speed. Find bugs and reachable dependency vulnerabilities. Enforce standards on every commit
Protect your app from malicious open source dependencies
Mend Bolt
AppDetect open source vulnerabilities in real time with suggested fixes for quick remediation
Bridgecrew
AppFind and fix security and compliance issues in Terraform, AWS Cloudformation, ARM templates, Kubernetes, and more
Automatic daily backups of your GitHub repos and metadata with on-demand restores to protect your business
The Drata (Version Control) app uses read-only repo access to continuously monitor your SOC 2 compliance posture
Prevent security issues before they become threats
GuardRails
AppGuardRails provides continuous security feedback for modern development teams
A single tool for securing IaC, container images and open source software across all modern architectures and software supply
Debricked
AppAutomatically identify, fix and prevent vulnerabilities in your open source dependencies
Your Automated Product Security Engineer
Secureframe
AppStreamline your security compliance
Automatic, daily repo and metadata backup - no maintenance needed: fast restore, DR, AWS, and S3 cloud storage support
Backup repositories, metadata and LFS into AWS, Azure, OneDrive, GCP, etc. Pay per repositories, not seats. SOC2 in progress
Resolve vulnerabilities faster with highly relevant in-app secure coding learning
BluBracket is like Clippy for code security, but—you know—not as annoying and a lot more effective