{"payload":{"featured":[],"recommended":[],"recently_added":[],"search_results":{"results":[{"type":"repository_action","id":"2166021","name":"Policy checks to validate AWS IAM policies in Terraform templates\" Action For GitHub Actions","free":null,"primary_category":"Security","secondary_category":"Code Scanning Ready","is_verified_owner":true,"slug":"policy-checks-to-validate-aws-iam-policies-in-terraform-templates-action-for-github-actions","owner_login":"aws-actions","resource_path":"/marketplace/actions/policy-checks-to-validate-aws-iam-policies-in-terraform-templates-action-for-github-actions","highlights":{"description":"","name.ngram":""},"description":"Validate IAM Policies in TF templates using ValidatePolicy, CheckAccessNotGranted CheckNoNewAccess API in Access\nAnalyzer\n","stars":3,"dependents_count":5,"icon_svg":"\n","repository_action":{"repository_action":{"id":2166021,"path":"action.yaml","name":"Policy checks to validate AWS IAM policies in Terraform templates\" Action For GitHub Actions","description":"Validate IAM Policies in TF templates using ValidatePolicy, CheckAccessNotGranted & CheckNoNewAccess API in Access Analyzer","icon_name":"cloud","color":"ffffff","featured":false,"repository_id":784921498,"rank_multiplier":1.0,"slug":"policy-checks-to-validate-aws-iam-policies-in-terraform-templates-action-for-github-actions","security_email":"mponnuru@amazon.com"}}},{"type":"repository_action","id":"1994647","name":"Attest Build Provenance","free":null,"primary_category":"Security","secondary_category":null,"is_verified_owner":true,"slug":"attest-build-provenance","owner_login":"actions","resource_path":"/marketplace/actions/attest-build-provenance","highlights":{"description":"","name.ngram":""},"description":"Generate provenance attestations for build artifacts\n","stars":96,"dependents_count":2305,"icon_svg":"\n\n\n","repository_action":{"repository_action":{"id":1994647,"path":"action.yml","name":"Attest Build Provenance","description":"Generate provenance attestations for build artifacts","icon_name":"lock","color":"0366d6","featured":false,"repository_id":760702757,"rank_multiplier":1.0,"slug":"attest-build-provenance","security_email":"bdehamer@github.com"}}},{"type":"repository_action","id":"1562498","name":"Fortify AST Scan","free":null,"primary_category":"Security","secondary_category":"Code Scanning Ready","is_verified_owner":true,"slug":"fortify-ast-scan","owner_login":"fortify","resource_path":"/marketplace/actions/fortify-ast-scan","highlights":{"description":"","name.ngram":""},"description":"Find and fix vulnerabilities to build secure software with Fortify Code Security\n","stars":8,"dependents_count":48,"icon_svg":"\nimage/svg+xml","repository_action":{"repository_action":{"id":1562498,"path":"action.yml","name":"Fortify AST Scan","description":"Find and fix vulnerabilities to build secure software with Fortify Code Security","icon_name":"shield","color":"ffffff","featured":false,"repository_id":694614049,"rank_multiplier":1.0,"slug":"fortify-ast-scan","security_email":"rsenden@opentext.com"}}},{"type":"repository_action","id":"1408622","name":"Lint with lintrunner","free":null,"primary_category":"Code quality","secondary_category":"Code Scanning Ready","is_verified_owner":false,"slug":"lint-with-lintrunner","owner_login":"justinchuby","resource_path":"/marketplace/actions/lint-with-lintrunner","highlights":{"description":"","name.ngram":""},"description":"Lint the repository with lintrunner\n","stars":1,"dependents_count":9,"icon_svg":"\n \n \n\n","repository_action":{"repository_action":{"id":1408622,"path":"action.yml","name":"Lint with lintrunner","description":"Lint the repository with lintrunner","icon_name":"check-circle","color":"ffd33d","featured":false,"repository_id":672102690,"rank_multiplier":1.0,"slug":"lint-with-lintrunner","security_email":null}}},{"type":"repository_action","id":"1284377","name":"Create GitHub App Token","free":null,"primary_category":"Security","secondary_category":null,"is_verified_owner":true,"slug":"create-github-app-token","owner_login":"actions","resource_path":"/marketplace/actions/create-github-app-token","highlights":{"description":"","name.ngram":""},"description":"GitHub Action for creating a GitHub App installation access token\n","stars":271,"dependents_count":2255,"icon_svg":"\n\n\n","repository_action":{"repository_action":{"id":1284377,"path":"action.yml","name":"Create GitHub App Token","description":"GitHub Action for creating a GitHub App installation access token","icon_name":"lock","color":"0366d6","featured":false,"repository_id":642580244,"rank_multiplier":1.0,"slug":"create-github-app-token","security_email":"gr2m@github.com"}}},{"type":"repository_action","id":"1225643","name":"golang-govulncheck-action","free":null,"primary_category":"Security","secondary_category":"Dependency management","is_verified_owner":true,"slug":"golang-govulncheck-action","owner_login":"golang","resource_path":"/marketplace/actions/golang-govulncheck-action","highlights":{"description":"","name.ngram":""},"description":"Run govulncheck\n","stars":83,"dependents_count":629,"icon_svg":null,"repository_action":{"repository_action":{"id":1225643,"path":"action.yml","name":"golang-govulncheck-action","description":"Run govulncheck","icon_name":null,"color":"d73a49","featured":false,"repository_id":636411896,"rank_multiplier":1.0,"slug":"golang-govulncheck-action","security_email":"zpavlinovic@google.com"}}},{"type":"repository_action","id":"1037127","name":"Docker Scout","free":null,"primary_category":"Security","secondary_category":"Container CI","is_verified_owner":true,"slug":"docker-scout","owner_login":"docker","resource_path":"/marketplace/actions/docker-scout","highlights":{"description":"","name.ngram":""},"description":"List vulnerabilities in images; find better base images and upload an image SBOM to Docker Scout\n","stars":65,"dependents_count":332,"icon_svg":"","repository_action":{"repository_action":{"id":1037127,"path":"action.yaml","name":"Docker Scout","description":"List vulnerabilities in images; find better base images and upload an image SBOM to Docker Scout","icon_name":"shield","color":"ffffff","featured":false,"repository_id":607129616,"rank_multiplier":1.0,"slug":"docker-scout","security_email":"cdupuis"}}},{"type":"repository_action","id":"930198","name":"Bearer Action","free":null,"primary_category":"Continuous integration","secondary_category":"Security","is_verified_owner":true,"slug":"bearer-action","owner_login":"Bearer","resource_path":"/marketplace/actions/bearer-action","highlights":{"description":"","name.ngram":""},"description":"Bearer is a free and open SAST tool that analyzes your source code to help find and fix security and privacy risks\n","stars":13,"dependents_count":161,"icon_svg":"\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n","repository_action":{"repository_action":{"id":930198,"path":"action.yml","name":"Bearer Action","description":"Bearer is a free and open SAST tool that analyzes your source code to help find and fix security and privacy risks","icon_name":"check-square","color":"ffffff","featured":false,"repository_id":587222270,"rank_multiplier":1.0,"slug":"bearer-action","security_email":"security@bearer.sh"}}},{"type":"repository_action","id":"785180","name":"SonarCloud Scan for C and C++","free":null,"primary_category":"Security","secondary_category":"Code quality","is_verified_owner":true,"slug":"sonarcloud-scan-for-c-and-c","owner_login":"SonarSource","resource_path":"/marketplace/actions/sonarcloud-scan-for-c-and-c","highlights":{"description":"","name.ngram":""},"description":"Scan your C and C++ code with SonarCloud to detect bugs, vulnerabilities and code smells\n","stars":7,"dependents_count":1183,"icon_svg":"\n\n\n\n\n\n","repository_action":{"repository_action":{"id":785180,"path":"action.yml","name":"SonarCloud Scan for C and C++","description":"Scan your C and C++ code with SonarCloud to detect bugs, vulnerabilities and code smells","icon_name":"check","color":"ffffff","featured":false,"repository_id":558412294,"rank_multiplier":1.0,"slug":"sonarcloud-scan-for-c-and-c","security_email":"security@sonarsource.com"}}},{"type":"repository_action","id":"703426","name":"Bandit Scan","free":null,"primary_category":"Security","secondary_category":"Code Scanning Ready","is_verified_owner":true,"slug":"bandit-scan","owner_login":"shundor","resource_path":"/marketplace/actions/bandit-scan","highlights":{"description":"","name.ngram":""},"description":"Bandit Scan\n","stars":9,"dependents_count":830,"icon_svg":"\n \n \n\n","repository_action":{"repository_action":{"id":703426,"path":"action.yml","name":"Bandit Scan","description":"Bandit Scan","icon_name":"arrow-left","color":"6f42c1","featured":false,"repository_id":538512313,"rank_multiplier":1.0,"slug":"bandit-scan","security_email":"abirismyname@github.com"}}},{"type":"repository_action","id":"686227","name":"Check storage layout","free":null,"primary_category":"Continuous integration","secondary_category":"Security","is_verified_owner":false,"slug":"check-storage-layout","owner_login":"Rubilmax","resource_path":"/marketplace/actions/check-storage-layout","highlights":{"description":"","name.ngram":""},"description":"Easily compare storage layout reports generated by foundry\n","stars":88,"dependents_count":29,"icon_svg":"\n \n \n \n\n","repository_action":{"repository_action":{"id":686227,"path":"action.yml","name":"Check storage layout","description":"Easily compare storage layout reports generated by foundry","icon_name":"info","color":"6f42c1","featured":false,"repository_id":533799238,"rank_multiplier":1.0,"slug":"check-storage-layout","security_email":null}}},{"type":"repository_action","id":"643384","name":"Maven Dependency Tree Dependency Submission","free":null,"primary_category":"Security","secondary_category":"Dependency management","is_verified_owner":true,"slug":"maven-dependency-tree-dependency-submission","owner_login":"advanced-security","resource_path":"/marketplace/actions/maven-dependency-tree-dependency-submission","highlights":{"description":"","name.ngram":""},"description":"A GitHub Action for Maven project to submit a complete dependency tree to populate the GitHub Dependency Graph\n","stars":45,"dependents_count":22155,"icon_svg":"\n \n \n \n\n","repository_action":{"repository_action":{"id":643384,"path":"action.yml","name":"Maven Dependency Tree Dependency Submission","description":"A GitHub Action for Maven project to submit a complete dependency tree to populate the GitHub Dependency Graph","icon_name":"feather","color":"28a745","featured":false,"repository_id":511865960,"rank_multiplier":1.0,"slug":"maven-dependency-tree-dependency-submission","security_email":"peter-murray@github.com"}}},{"type":"repository_action","id":"616831","name":"Filter SARIF","free":null,"primary_category":"Security","secondary_category":"Code Scanning Ready","is_verified_owner":true,"slug":"filter-sarif","owner_login":"advanced-security","resource_path":"/marketplace/actions/filter-sarif","highlights":{"description":"","name.ngram":""},"description":"Filter SARIF results by path\n","stars":21,"dependents_count":367,"icon_svg":null,"repository_action":{"repository_action":{"id":616831,"path":"action.yml","name":"Filter SARIF","description":"Filter SARIF results by path","icon_name":null,"color":"f66a0a","featured":false,"repository_id":517930493,"rank_multiplier":1.0,"slug":"filter-sarif","security_email":"aegilops@github.com"}}},{"type":"repository_action","id":"609007","name":"Synopsys Action","free":null,"primary_category":"Security","secondary_category":"Code quality","is_verified_owner":true,"slug":"synopsys-action","owner_login":"synopsys-sig","resource_path":"/marketplace/actions/synopsys-action","highlights":{"description":"","name.ngram":""},"description":"Find and fix software weaknesses and vulnerabilities during development, before you ship or deploy\n","stars":21,"dependents_count":239,"icon_svg":"\n \n\n","repository_action":{"repository_action":{"id":609007,"path":"action.yml","name":"Synopsys Action","description":"Find and fix software weaknesses and vulnerabilities during development, before you ship or deploy","icon_name":"shield","color":"6f42c1","featured":false,"repository_id":515864426,"rank_multiplier":1.0,"slug":"synopsys-action","security_email":"rajsk@synopsys.com"}}},{"type":"repository_action","id":"596524","name":"Secret Scanner","free":null,"primary_category":"Security","secondary_category":null,"is_verified_owner":false,"slug":"secret-scanner","owner_login":"secret-scanner","resource_path":"/marketplace/actions/secret-scanner","highlights":{"description":"","name.ngram":""},"description":"Scan for secrets in a repository\n","stars":3,"dependents_count":261,"icon_svg":"\n \n \n\n","repository_action":{"repository_action":{"id":596524,"path":"action.yml","name":"Secret Scanner","description":"Scan for secrets in a repository","icon_name":"eye","color":"f66a0a","featured":false,"repository_id":512898872,"rank_multiplier":1.0,"slug":"secret-scanner","security_email":"bgolding29@gmail.com"}}},{"type":"repository_action","id":"589493","name":"gh-action-sigstore-python","free":null,"primary_category":"Security","secondary_category":null,"is_verified_owner":true,"slug":"gh-action-sigstore-python","owner_login":"sigstore","resource_path":"/marketplace/actions/gh-action-sigstore-python","highlights":{"description":"","name.ngram":""},"description":"Use sigstore-python to sign Python packages\n","stars":43,"dependents_count":1329,"icon_svg":null,"repository_action":{"repository_action":{"id":589493,"path":"action.yml","name":"gh-action-sigstore-python","description":"Use sigstore-python to sign Python packages","icon_name":null,"color":"0366d6","featured":false,"repository_id":508560980,"rank_multiplier":1.0,"slug":"gh-action-sigstore-python","security_email":"alex.cameron@trailofbits.com"}}},{"type":"repository_action","id":"559825","name":"Sbt Dependency Submission","free":null,"primary_category":"Security","secondary_category":"Dependency management","is_verified_owner":true,"slug":"sbt-dependency-submission","owner_login":"scalacenter","resource_path":"/marketplace/actions/sbt-dependency-submission","highlights":{"description":"","name.ngram":""},"description":"Submits the dependency graph of an sbt build to the Github Submission API\n","stars":57,"dependents_count":1194,"icon_svg":"\n \n \n \n \n\n","repository_action":{"repository_action":{"id":559825,"path":"action.yml","name":"Sbt Dependency Submission","description":"Submits the dependency graph of an sbt build to the Github Submission API","icon_name":"package","color":"ffffff","featured":false,"repository_id":504158746,"rank_multiplier":1.0,"slug":"sbt-dependency-submission","security_email":"adrien.piquerez@gmail.com"}}},{"type":"repository_action","id":"532462","name":"Code sign a file with pfx certificate (digicert)","free":null,"primary_category":"Security","secondary_category":"Publishing","is_verified_owner":false,"slug":"code-sign-a-file-with-pfx-certificate-digicert","owner_login":"GermanBluefox","resource_path":"/marketplace/actions/code-sign-a-file-with-pfx-certificate-digicert","highlights":{"description":"","name.ngram":""},"description":"Sign a file with a pfx certificate\n","stars":2,"dependents_count":211,"icon_svg":"\n \n \n\n","repository_action":{"repository_action":{"id":532462,"path":"action.yml","name":"Code sign a file with pfx certificate (digicert)","description":"Sign a file with a pfx certificate","icon_name":"award","color":"28a745","featured":false,"repository_id":496947666,"rank_multiplier":1.0,"slug":"code-sign-a-file-with-pfx-certificate-digicert","security_email":null}}},{"type":"repository_action","id":"468277","name":"TruffleHog OSS","free":null,"primary_category":"Continuous integration","secondary_category":"Security","is_verified_owner":true,"slug":"trufflehog-oss","owner_login":"trufflesecurity","resource_path":"/marketplace/actions/trufflehog-oss","highlights":{"description":"","name.ngram":""},"description":"Scan Github Actions with TruffleHog\n","stars":14102,"dependents_count":1335,"icon_svg":"\n \n\n","repository_action":{"repository_action":{"id":468277,"path":"action.yml","name":"TruffleHog OSS","description":"Scan Github Actions with TruffleHog","icon_name":"shield","color":"28a745","featured":false,"repository_id":77726177,"rank_multiplier":1.0,"slug":"trufflehog-oss","security_email":"dustin@trufflesec.com"}}},{"type":"repository_action","id":"466852","name":"Secrets Scanner","free":null,"primary_category":"Security","secondary_category":null,"is_verified_owner":false,"slug":"secrets-scanner","owner_login":"kams-mash","resource_path":"/marketplace/actions/secrets-scanner","highlights":{"description":"","name.ngram":""},"description":"Scan repo for secrets using awslabs/git-secrets\n","stars":0,"dependents_count":190,"icon_svg":"\n \n \n\n","repository_action":{"repository_action":{"id":466852,"path":"action.yml","name":"Secrets Scanner","description":"Scan repo for secrets using awslabs/git-secrets","icon_name":"lock","color":"d73a49","featured":false,"repository_id":479205320,"rank_multiplier":1.0,"slug":"secrets-scanner","security_email":null}}}],"total":368,"total_pages":19},"categories":{"apps":[{"name":"API management","slug":"api-management","description_html":"

Structure your API infrastructure to enable various internet gateways to interact with your service.

\n"},{"name":"Backup Utilities","slug":"backup-utilities","description_html":"

Utilities providing periodic backups of your GitHub data

\n"},{"name":"Chat","slug":"chat","description_html":"

Bring GitHub into your conversations.

\n"},{"name":"Code quality","slug":"code-quality","description_html":"

Automate your code review with style, quality, security, and test‑coverage checks when you need them.

\n"},{"name":"Code review","slug":"code-review","description_html":"

Ensure your code meets quality standards and ship with confidence.

\n"},{"name":"Container CI","slug":"container-ci","description_html":"

Continuous integration for container applications.

\n"},{"name":"Continuous integration","slug":"continuous-integration","description_html":"

Automatically build and test your code as you push it to GitHub, preventing bugs from being deployed to production.

\n"},{"name":"Dependency management","slug":"dependency-management","description_html":"

Secure and manage your third-party dependencies.

\n"},{"name":"Deployment","slug":"deployment","description_html":"

Streamline your code deployment so you can focus on your product.

\n"},{"name":"Deployment Protection Rules","slug":"deployment-protection-rules","description_html":"

Enables custom protection rules to gate deployments with third-party services

\n"},{"name":"Game CI","slug":"game-ci","description_html":"

Tools for building a CI pipeline for game development

\n"},{"name":"IDEs","slug":"ides","description_html":"

Find the right interface to build, debug, and deploy your source code.

\n"},{"name":"Learning","slug":"learning","description_html":"

Get the skills you need to level up.

\n"},{"name":"Localization","slug":"localization","description_html":"

Extend your software's reach. Localize and translate continuously from GitHub.

\n"},{"name":"Mobile","slug":"mobile","description_html":"

Improve your workflow for the small screen.

\n"},{"name":"Mobile CI","slug":"mobile-ci","description_html":"

Continuous integration for Mobile applications

\n"},{"name":"Monitoring","slug":"monitoring","description_html":"

Monitor the impact of your code changes. Measure performance, track errors, and analyze your application.

\n"},{"name":"Project management","slug":"project-management","description_html":"

Organize, manage, and track your project with tools that build on top of issues and pull requests.

\n"},{"name":"Publishing","slug":"publishing","description_html":"

Get your site ready for production so you can get the word out.

\n"},{"name":"Recently added","slug":"recently-added","description_html":"

The latest tools that help you and your team build software better, together.

\n"},{"name":"Security","slug":"security","description_html":"

Find, fix, and prevent security vulnerabilities before they can be exploited.

\n"},{"name":"Support","slug":"support","description_html":"

Get your team and customers the help they need.

\n"},{"name":"Testing","slug":"testing","description_html":"

Eliminate bugs and ship with more confidence by adding these tools to your workflow.

\n"},{"name":"Utilities","slug":"utilities","description_html":"

Auxiliary tools to enhance your experience on GitHub

\n"}],"actions":[{"name":"API management","slug":"api-management","description_html":"

Structure your API infrastructure to enable various internet gateways to interact with your service.

\n"},{"name":"Backup Utilities","slug":"backup-utilities","description_html":"

Utilities providing periodic backups of your GitHub data

\n"},{"name":"Chat","slug":"chat","description_html":"

Bring GitHub into your conversations.

\n"},{"name":"Code quality","slug":"code-quality","description_html":"

Automate your code review with style, quality, security, and test‑coverage checks when you need them.

\n"},{"name":"Code review","slug":"code-review","description_html":"

Ensure your code meets quality standards and ship with confidence.

\n"},{"name":"Container CI","slug":"container-ci","description_html":"

Continuous integration for container applications.

\n"},{"name":"Continuous integration","slug":"continuous-integration","description_html":"

Automatically build and test your code as you push it to GitHub, preventing bugs from being deployed to production.

\n"},{"name":"Dependency management","slug":"dependency-management","description_html":"

Secure and manage your third-party dependencies.

\n"},{"name":"Deployment","slug":"deployment","description_html":"

Streamline your code deployment so you can focus on your product.

\n"},{"name":"Deployment Protection Rules","slug":"deployment-protection-rules","description_html":"

Enables custom protection rules to gate deployments with third-party services

\n"},{"name":"Game CI","slug":"game-ci","description_html":"

Tools for building a CI pipeline for game development

\n"},{"name":"GitHub Sponsors","slug":"github-sponsors","description_html":"

Tools to manage your GitHub Sponsors community

\n"},{"name":"IDEs","slug":"ides","description_html":"

Find the right interface to build, debug, and deploy your source code.

\n"},{"name":"Learning","slug":"learning","description_html":"

Get the skills you need to level up.

\n"},{"name":"Localization","slug":"localization","description_html":"

Extend your software's reach. Localize and translate continuously from GitHub.

\n"},{"name":"Mobile","slug":"mobile","description_html":"

Improve your workflow for the small screen.

\n"},{"name":"Mobile CI","slug":"mobile-ci","description_html":"

Continuous integration for Mobile applications

\n"},{"name":"Monitoring","slug":"monitoring","description_html":"

Monitor the impact of your code changes. Measure performance, track errors, and analyze your application.

\n"},{"name":"Project management","slug":"project-management","description_html":"

Organize, manage, and track your project with tools that build on top of issues and pull requests.

\n"},{"name":"Publishing","slug":"publishing","description_html":"

Get your site ready for production so you can get the word out.

\n"},{"name":"Security","slug":"security","description_html":"

Find, fix, and prevent security vulnerabilities before they can be exploited.

\n"},{"name":"Support","slug":"support","description_html":"

Get your team and customers the help they need.

\n"},{"name":"Testing","slug":"testing","description_html":"

Eliminate bugs and ship with more confidence by adding these tools to your workflow.

\n"},{"name":"Utilities","slug":"utilities","description_html":"

Auxiliary tools to enhance your experience on GitHub

\n"}]}},"title":"Marketplace"}