{"payload":{"featured":[],"recommended":[],"recentlyAdded":[],"searchResults":{"results":[{"type":"repository_action","id":"2031314","name":"Dependabot EPSS Action","free":null,"primary_category":"Security","secondary_category":"Dependency management","is_verified_owner":true,"slug":"dependabot-epss-action","owner_login":"advanced-security","resource_path":"/marketplace/actions/dependabot-epss-action","highlights":{"description":"","name.ngram":""},"description":"Detect dependabot alerts that exceed EPSS threshold\n","stars":1,"dependents_count":null,"icon_svg":"\n \n \n \n \n\n","repository_action":{"repository_action":{"id":2031314,"path":"action.yml","name":"Dependabot EPSS Action","description":"Detect dependabot alerts that exceed EPSS threshold","icon_name":"package","color":"6f42c1","featured":false,"repository_id":766291167,"rank_multiplier":1.0,"slug":"dependabot-epss-action","security_email":"felickz@github.com"}}},{"type":"repository_action","id":"2166019","name":"Policy checks to validate AWS IAM policies in CloudFormation templates\" Action For GitHub Actions","free":null,"primary_category":"Security","secondary_category":"Code Scanning Ready","is_verified_owner":true,"slug":"policy-checks-to-validate-aws-iam-policies-in-cloudformation-templates-action-for-github-actions","owner_login":"aws-actions","resource_path":"/marketplace/actions/policy-checks-to-validate-aws-iam-policies-in-cloudformation-templates-action-for-github-actions","highlights":{"description":"","name.ngram":""},"description":"Validate IAM Policies in CFN templates using ValidatePolicy, CheckAccessNotGranted CheckNoNewAccess API in Access\nAnalyzer\n","stars":5,"dependents_count":8,"icon_svg":"\n","repository_action":{"repository_action":{"id":2166019,"path":"action.yaml","name":"Policy checks to validate AWS IAM policies in CloudFormation templates\" Action For GitHub Actions","description":"Validate IAM Policies in CFN templates using ValidatePolicy, CheckAccessNotGranted & CheckNoNewAccess API in Access Analyzer","icon_name":"cloud","color":"ffffff","featured":false,"repository_id":784920149,"rank_multiplier":1.0,"slug":"policy-checks-to-validate-aws-iam-policies-in-cloudformation-templates-action-for-github-actions","security_email":"mponnuru@amazon.com"}}},{"type":"repository_action","id":"2146281","name":"Analyze with CodeQL","free":null,"primary_category":"Continuous integration","secondary_category":"Security","is_verified_owner":false,"slug":"analyze-with-codeql","owner_login":"codebeltnet","resource_path":"/marketplace/actions/analyze-with-codeql","highlights":{"description":"","name.ngram":""},"description":"An opinionated action that is used to initialize CodeQL\n","stars":0,"dependents_count":6,"icon_svg":"\n \n\n","repository_action":{"repository_action":{"id":2146281,"path":"action.yml","name":"Analyze with CodeQL","description":"An opinionated action that is used to initialize CodeQL","icon_name":"umbrella","color":"0366d6","featured":false,"repository_id":782152943,"rank_multiplier":1.0,"slug":"analyze-with-codeql","security_email":"mmdevelopment@hotmail.com"}}},{"type":"repository_action","id":"2146288","name":"Finalyze with CodeQL","free":null,"primary_category":"Continuous integration","secondary_category":"Security","is_verified_owner":false,"slug":"finalyze-with-codeql","owner_login":"codebeltnet","resource_path":"/marketplace/actions/finalyze-with-codeql","highlights":{"description":"","name.ngram":""},"description":"An opinionated action that performs the actual SAST analysis with previously initialized CodeQL\n","stars":0,"dependents_count":6,"icon_svg":"\n \n\n","repository_action":{"repository_action":{"id":2146288,"path":"action.yml","name":"Finalyze with CodeQL","description":"An opinionated action that performs the actual SAST analysis with previously initialized CodeQL","icon_name":"umbrella","color":"0366d6","featured":false,"repository_id":782157140,"rank_multiplier":1.0,"slug":"finalyze-with-codeql","security_email":"mmdevelopment@hotmail.com"}}},{"type":"repository_action","id":"1994647","name":"Attest Build Provenance","free":null,"primary_category":"Security","secondary_category":null,"is_verified_owner":true,"slug":"attest-build-provenance","owner_login":"actions","resource_path":"/marketplace/actions/attest-build-provenance","highlights":{"description":"","name.ngram":""},"description":"Generate provenance attestations for build artifacts\n","stars":111,"dependents_count":2932,"icon_svg":"\n\n\n","repository_action":{"repository_action":{"id":1994647,"path":"action.yml","name":"Attest Build Provenance","description":"Generate provenance attestations for build artifacts","icon_name":"lock","color":"0366d6","featured":false,"repository_id":760702757,"rank_multiplier":1.0,"slug":"attest-build-provenance","security_email":"bdehamer@github.com"}}},{"type":"repository_action","id":"1884973","name":"pyupio/safety-action","free":null,"primary_category":"Security","secondary_category":"Dependency management","is_verified_owner":false,"slug":"pyupio-safety-action","owner_login":"pyupio","resource_path":"/marketplace/actions/pyupio-safety-action","highlights":{"description":"","name.ngram":""},"description":"Runs the Safety CLI dependency scanner against your project\n","stars":3,"dependents_count":6,"icon_svg":"\n \n \n\n","repository_action":{"repository_action":{"id":1884973,"path":"action.yml","name":"pyupio/safety-action","description":"Runs the Safety CLI dependency scanner against your project","icon_name":"lock","color":"6f42c1","featured":false,"repository_id":744835871,"rank_multiplier":1.0,"slug":"pyupio-safety-action","security_email":"security@safetycli.com"}}},{"type":"repository_action","id":"1562498","name":"Fortify AST Scan","free":null,"primary_category":"Security","secondary_category":"Code Scanning Ready","is_verified_owner":true,"slug":"fortify-ast-scan","owner_login":"fortify","resource_path":"/marketplace/actions/fortify-ast-scan","highlights":{"description":"","name.ngram":""},"description":"Find and fix vulnerabilities to build secure software with Fortify Code Security\n","stars":8,"dependents_count":61,"icon_svg":"\nimage/svg+xml","repository_action":{"repository_action":{"id":1562498,"path":"action.yml","name":"Fortify AST Scan","description":"Find and fix vulnerabilities to build secure software with Fortify Code Security","icon_name":"shield","color":"ffffff","featured":false,"repository_id":694614049,"rank_multiplier":1.0,"slug":"fortify-ast-scan","security_email":"rsenden@opentext.com"}}},{"type":"repository_action","id":"1284377","name":"Create GitHub App Token","free":null,"primary_category":"Security","secondary_category":null,"is_verified_owner":true,"slug":"create-github-app-token","owner_login":"actions","resource_path":"/marketplace/actions/create-github-app-token","highlights":{"description":"","name.ngram":""},"description":"GitHub Action for creating a GitHub App installation access token\n","stars":277,"dependents_count":2338,"icon_svg":"\n\n\n","repository_action":{"repository_action":{"id":1284377,"path":"action.yml","name":"Create GitHub App Token","description":"GitHub Action for creating a GitHub App installation access token","icon_name":"lock","color":"0366d6","featured":false,"repository_id":642580244,"rank_multiplier":1.0,"slug":"create-github-app-token","security_email":"gr2m@github.com"}}},{"type":"repository_action","id":"1225643","name":"golang-govulncheck-action","free":null,"primary_category":"Security","secondary_category":"Dependency management","is_verified_owner":true,"slug":"golang-govulncheck-action","owner_login":"golang","resource_path":"/marketplace/actions/golang-govulncheck-action","highlights":{"description":"","name.ngram":""},"description":"Run govulncheck\n","stars":83,"dependents_count":645,"icon_svg":null,"repository_action":{"repository_action":{"id":1225643,"path":"action.yml","name":"golang-govulncheck-action","description":"Run govulncheck","icon_name":null,"color":"d73a49","featured":false,"repository_id":636411896,"rank_multiplier":1.0,"slug":"golang-govulncheck-action","security_email":"zpavlinovic@google.com"}}},{"type":"repository_action","id":"1037127","name":"Docker Scout","free":null,"primary_category":"Security","secondary_category":"Container CI","is_verified_owner":true,"slug":"docker-scout","owner_login":"docker","resource_path":"/marketplace/actions/docker-scout","highlights":{"description":"","name.ngram":""},"description":"List vulnerabilities in images; find better base images and upload an image SBOM to Docker Scout\n","stars":68,"dependents_count":390,"icon_svg":"","repository_action":{"repository_action":{"id":1037127,"path":"action.yaml","name":"Docker Scout","description":"List vulnerabilities in images; find better base images and upload an image SBOM to Docker Scout","icon_name":"shield","color":"ffffff","featured":false,"repository_id":607129616,"rank_multiplier":1.0,"slug":"docker-scout","security_email":"cdupuis"}}},{"type":"repository_action","id":"882859","name":"OX Security Scan","free":null,"primary_category":"Security","secondary_category":"Code Scanning Ready","is_verified_owner":true,"slug":"ox-security-scan","owner_login":"oxsecurity","resource_path":"/marketplace/actions/ox-security-scan","highlights":{"description":"","name.ngram":""},"description":"OX Security Scan as part of your GitHub Actions workflow\n","stars":8,"dependents_count":17,"icon_svg":"","repository_action":{"repository_action":{"id":882859,"path":"action.yml","name":"OX Security Scan","description":"OX Security Scan as part of your GitHub Actions workflow","icon_name":"check-circle","color":"ffffff","featured":false,"repository_id":578173107,"rank_multiplier":1.0,"slug":"ox-security-scan","security_email":"yury.imbro@ox.security"}}},{"type":"repository_action","id":"785180","name":"SonarCloud Scan for C and C++","free":null,"primary_category":"Security","secondary_category":"Code quality","is_verified_owner":true,"slug":"sonarcloud-scan-for-c-and-c","owner_login":"SonarSource","resource_path":"/marketplace/actions/sonarcloud-scan-for-c-and-c","highlights":{"description":"","name.ngram":""},"description":"Scan your C and C++ code with SonarCloud to detect bugs, vulnerabilities and code smells\n","stars":7,"dependents_count":1191,"icon_svg":"\n\n\n\n\n\n","repository_action":{"repository_action":{"id":785180,"path":"action.yml","name":"SonarCloud Scan for C and C++","description":"Scan your C and C++ code with SonarCloud to detect bugs, vulnerabilities and code smells","icon_name":"check","color":"ffffff","featured":false,"repository_id":558412294,"rank_multiplier":1.0,"slug":"sonarcloud-scan-for-c-and-c","security_email":"security@sonarsource.com"}}},{"type":"repository_action","id":"718930","name":"AWS Secrets Manager GitHub Action","free":null,"primary_category":"Continuous integration","secondary_category":"Security","is_verified_owner":true,"slug":"aws-secrets-manager-github-action","owner_login":"aws-actions","resource_path":"/marketplace/actions/aws-secrets-manager-github-action","highlights":{"description":"","name.ngram":""},"description":"GitHub action for retrieving secrets from AWS Secrets Manager\n","stars":135,"dependents_count":307,"icon_svg":"\n","repository_action":{"repository_action":{"id":718930,"path":"action.yml","name":"AWS Secrets Manager GitHub Action","description":"GitHub action for retrieving secrets from AWS Secrets Manager","icon_name":"cloud","color":"ffffff","featured":false,"repository_id":541792993,"rank_multiplier":1.0,"slug":"aws-secrets-manager-github-action","security_email":"aws-secrets-manager-pm@amazon.com"}}},{"type":"repository_action","id":"703426","name":"Bandit Scan","free":null,"primary_category":"Security","secondary_category":"Code Scanning Ready","is_verified_owner":true,"slug":"bandit-scan","owner_login":"shundor","resource_path":"/marketplace/actions/bandit-scan","highlights":{"description":"","name.ngram":""},"description":"Bandit Scan\n","stars":9,"dependents_count":840,"icon_svg":"\n \n \n\n","repository_action":{"repository_action":{"id":703426,"path":"action.yml","name":"Bandit Scan","description":"Bandit Scan","icon_name":"arrow-left","color":"6f42c1","featured":false,"repository_id":538512313,"rank_multiplier":1.0,"slug":"bandit-scan","security_email":"abirismyname@github.com"}}},{"type":"repository_action","id":"652225","name":"Contrast Security SCA","free":null,"primary_category":"Security","secondary_category":"Dependency management","is_verified_owner":false,"slug":"contrast-security-sca","owner_login":"Contrast-Security-OSS","resource_path":"/marketplace/actions/contrast-security-sca","highlights":{"description":"","name.ngram":""},"description":"Contrast Source Composition Analysis\n","stars":9,"dependents_count":258,"icon_svg":null,"repository_action":{"repository_action":{"id":652225,"path":"action.yml","name":"Contrast Security SCA","description":"Contrast Source Composition Analysis","icon_name":null,"color":"ffd33d","featured":false,"repository_id":525768161,"rank_multiplier":1.0,"slug":"contrast-security-sca","security_email":"security@contrastsecurity.com"}}},{"type":"repository_action","id":"643384","name":"Maven Dependency Tree Dependency Submission","free":null,"primary_category":"Security","secondary_category":"Dependency management","is_verified_owner":true,"slug":"maven-dependency-tree-dependency-submission","owner_login":"advanced-security","resource_path":"/marketplace/actions/maven-dependency-tree-dependency-submission","highlights":{"description":"","name.ngram":""},"description":"A GitHub Action for Maven project to submit a complete dependency tree to populate the GitHub Dependency Graph\n","stars":45,"dependents_count":22716,"icon_svg":"\n \n \n \n\n","repository_action":{"repository_action":{"id":643384,"path":"action.yml","name":"Maven Dependency Tree Dependency Submission","description":"A GitHub Action for Maven project to submit a complete dependency tree to populate the GitHub Dependency Graph","icon_name":"feather","color":"28a745","featured":false,"repository_id":511865960,"rank_multiplier":1.0,"slug":"maven-dependency-tree-dependency-submission","security_email":"peter-murray@github.com"}}},{"type":"repository_action","id":"638695","name":"cargo audit your Rust Dependencies","free":null,"primary_category":"Security","secondary_category":"Dependency management","is_verified_owner":false,"slug":"cargo-audit-your-rust-dependencies","owner_login":"actions-rust-lang","resource_path":"/marketplace/actions/cargo-audit-your-rust-dependencies","highlights":{"description":"","name.ngram":""},"description":"Audit Rust dependencies with cargo audit and the RustSec Advisory DB\n","stars":5,"dependents_count":124,"icon_svg":"\n \n\n","repository_action":{"repository_action":{"id":638695,"path":"action.yml","name":"cargo audit your Rust Dependencies","description":"Audit Rust dependencies with cargo audit and the RustSec Advisory DB\n","icon_name":"shield","color":"d73a49","featured":false,"repository_id":523107421,"rank_multiplier":1.0,"slug":"cargo-audit-your-rust-dependencies","security_email":"jonas@bushart.org"}}},{"type":"repository_action","id":"609007","name":"Synopsys Action","free":null,"primary_category":"Security","secondary_category":"Code quality","is_verified_owner":true,"slug":"synopsys-action","owner_login":"synopsys-sig","resource_path":"/marketplace/actions/synopsys-action","highlights":{"description":"","name.ngram":""},"description":"Find and fix software weaknesses and vulnerabilities during development, before you ship or deploy\n","stars":21,"dependents_count":244,"icon_svg":"\n \n\n","repository_action":{"repository_action":{"id":609007,"path":"action.yml","name":"Synopsys Action","description":"Find and fix software weaknesses and vulnerabilities during development, before you ship or deploy","icon_name":"shield","color":"6f42c1","featured":false,"repository_id":515864426,"rank_multiplier":1.0,"slug":"synopsys-action","security_email":"rajsk@synopsys.com"}}},{"type":"repository_action","id":"596524","name":"Secret Scanner","free":null,"primary_category":"Security","secondary_category":null,"is_verified_owner":false,"slug":"secret-scanner","owner_login":"secret-scanner","resource_path":"/marketplace/actions/secret-scanner","highlights":{"description":"","name.ngram":""},"description":"Scan for secrets in a repository\n","stars":3,"dependents_count":268,"icon_svg":"\n \n \n\n","repository_action":{"repository_action":{"id":596524,"path":"action.yml","name":"Secret Scanner","description":"Scan for secrets in a repository","icon_name":"eye","color":"f66a0a","featured":false,"repository_id":512898872,"rank_multiplier":1.0,"slug":"secret-scanner","security_email":"bgolding29@gmail.com"}}},{"type":"repository_action","id":"589493","name":"gh-action-sigstore-python","free":null,"primary_category":"Security","secondary_category":null,"is_verified_owner":true,"slug":"gh-action-sigstore-python","owner_login":"sigstore","resource_path":"/marketplace/actions/gh-action-sigstore-python","highlights":{"description":"","name.ngram":""},"description":"Use sigstore-python to sign Python packages\n","stars":43,"dependents_count":1362,"icon_svg":null,"repository_action":{"repository_action":{"id":589493,"path":"action.yml","name":"gh-action-sigstore-python","description":"Use sigstore-python to sign Python packages","icon_name":null,"color":"0366d6","featured":false,"repository_id":508560980,"rank_multiplier":1.0,"slug":"gh-action-sigstore-python","security_email":"alex.cameron@trailofbits.com"}}}],"total":700,"totalPages":35},"categories":{"apps":[{"name":"API management","slug":"api-management","description_html":"

Structure your API infrastructure to enable various internet gateways to interact with your service.

\n"},{"name":"Backup Utilities","slug":"backup-utilities","description_html":"

Utilities providing periodic backups of your GitHub data

\n"},{"name":"Chat","slug":"chat","description_html":"

Bring GitHub into your conversations.

\n"},{"name":"Code quality","slug":"code-quality","description_html":"

Automate your code review with style, quality, security, and test‑coverage checks when you need them.

\n"},{"name":"Code review","slug":"code-review","description_html":"

Ensure your code meets quality standards and ship with confidence.

\n"},{"name":"Container CI","slug":"container-ci","description_html":"

Continuous integration for container applications.

\n"},{"name":"Continuous integration","slug":"continuous-integration","description_html":"

Automatically build and test your code as you push it to GitHub, preventing bugs from being deployed to production.

\n"},{"name":"Dependency management","slug":"dependency-management","description_html":"

Secure and manage your third-party dependencies.

\n"},{"name":"Deployment","slug":"deployment","description_html":"

Streamline your code deployment so you can focus on your product.

\n"},{"name":"Deployment Protection Rules","slug":"deployment-protection-rules","description_html":"

Enables custom protection rules to gate deployments with third-party services

\n"},{"name":"Game CI","slug":"game-ci","description_html":"

Tools for building a CI pipeline for game development

\n"},{"name":"IDEs","slug":"ides","description_html":"

Find the right interface to build, debug, and deploy your source code.

\n"},{"name":"Learning","slug":"learning","description_html":"

Get the skills you need to level up.

\n"},{"name":"Localization","slug":"localization","description_html":"

Extend your software's reach. Localize and translate continuously from GitHub.

\n"},{"name":"Mobile","slug":"mobile","description_html":"

Improve your workflow for the small screen.

\n"},{"name":"Mobile CI","slug":"mobile-ci","description_html":"

Continuous integration for Mobile applications

\n"},{"name":"Monitoring","slug":"monitoring","description_html":"

Monitor the impact of your code changes. Measure performance, track errors, and analyze your application.

\n"},{"name":"Project management","slug":"project-management","description_html":"

Organize, manage, and track your project with tools that build on top of issues and pull requests.

\n"},{"name":"Publishing","slug":"publishing","description_html":"

Get your site ready for production so you can get the word out.

\n"},{"name":"Recently added","slug":"recently-added","description_html":"

The latest tools that help you and your team build software better, together.

\n"},{"name":"Security","slug":"security","description_html":"

Find, fix, and prevent security vulnerabilities before they can be exploited.

\n"},{"name":"Support","slug":"support","description_html":"

Get your team and customers the help they need.

\n"},{"name":"Testing","slug":"testing","description_html":"

Eliminate bugs and ship with more confidence by adding these tools to your workflow.

\n"},{"name":"Utilities","slug":"utilities","description_html":"

Auxiliary tools to enhance your experience on GitHub

\n"}],"actions":[{"name":"API management","slug":"api-management","description_html":"

Structure your API infrastructure to enable various internet gateways to interact with your service.

\n"},{"name":"Backup Utilities","slug":"backup-utilities","description_html":"

Utilities providing periodic backups of your GitHub data

\n"},{"name":"Chat","slug":"chat","description_html":"

Bring GitHub into your conversations.

\n"},{"name":"Code quality","slug":"code-quality","description_html":"

Automate your code review with style, quality, security, and test‑coverage checks when you need them.

\n"},{"name":"Code review","slug":"code-review","description_html":"

Ensure your code meets quality standards and ship with confidence.

\n"},{"name":"Container CI","slug":"container-ci","description_html":"

Continuous integration for container applications.

\n"},{"name":"Continuous integration","slug":"continuous-integration","description_html":"

Automatically build and test your code as you push it to GitHub, preventing bugs from being deployed to production.

\n"},{"name":"Dependency management","slug":"dependency-management","description_html":"

Secure and manage your third-party dependencies.

\n"},{"name":"Deployment","slug":"deployment","description_html":"

Streamline your code deployment so you can focus on your product.

\n"},{"name":"Deployment Protection Rules","slug":"deployment-protection-rules","description_html":"

Enables custom protection rules to gate deployments with third-party services

\n"},{"name":"Game CI","slug":"game-ci","description_html":"

Tools for building a CI pipeline for game development

\n"},{"name":"GitHub Sponsors","slug":"github-sponsors","description_html":"

Tools to manage your GitHub Sponsors community

\n"},{"name":"IDEs","slug":"ides","description_html":"

Find the right interface to build, debug, and deploy your source code.

\n"},{"name":"Learning","slug":"learning","description_html":"

Get the skills you need to level up.

\n"},{"name":"Localization","slug":"localization","description_html":"

Extend your software's reach. Localize and translate continuously from GitHub.

\n"},{"name":"Mobile","slug":"mobile","description_html":"

Improve your workflow for the small screen.

\n"},{"name":"Mobile CI","slug":"mobile-ci","description_html":"

Continuous integration for Mobile applications

\n"},{"name":"Monitoring","slug":"monitoring","description_html":"

Monitor the impact of your code changes. Measure performance, track errors, and analyze your application.

\n"},{"name":"Project management","slug":"project-management","description_html":"

Organize, manage, and track your project with tools that build on top of issues and pull requests.

\n"},{"name":"Publishing","slug":"publishing","description_html":"

Get your site ready for production so you can get the word out.

\n"},{"name":"Security","slug":"security","description_html":"

Find, fix, and prevent security vulnerabilities before they can be exploited.

\n"},{"name":"Support","slug":"support","description_html":"

Get your team and customers the help they need.

\n"},{"name":"Testing","slug":"testing","description_html":"

Eliminate bugs and ship with more confidence by adding these tools to your workflow.

\n"},{"name":"Utilities","slug":"utilities","description_html":"

Auxiliary tools to enhance your experience on GitHub

\n"}]}},"title":"Marketplace"}