GitHub code scanning

GitHub code scanning (Sep 2020 )

• https://docs.github.com/en/code-security/code-scanning/

Related

• GitHub Actions
• Code scanning
• GitHub Dependabot
• docker scan
• npm audit
• GitHub Advanced Security
• Secret scanning
• Grype

See also

• GitHub security, GitHub Advanced Security (GHAS), GitHub Security Advisory (GHSA), GitHub code scanning, GitHub dependabot, secret scanning, SECURITY.md
• Software Composition Analysis (SCA): Flexera, FOSSA, GitLab Ultimate, JFrog Xray, Snyk, Sonatype, Synopsys: Black Duck, Veracode, WhiteHat Security, WhiteSource, Bill of Materials (BOM), Semgrep, Clair

https://github.blog/2020-09-30-code-scanning-is-now-available/