Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
githubabcs-devops
/
gh-advsec-devsecops
Public
Notifications
You must be signed in to change notification settings
Fork
10
Star
23
Code
Issues
14
Pull requests
35
Actions
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Actions
Security and quality
Insights
Actions: githubabcs-devops/gh-advsec-devsecops
Actions
All workflows
Workflows
SCA - Dependency Review
SCA - Dependency Review
CI
CI
CI/CD for Azure Web App
CI/CD for Azure Web App
CIS - Anchore Grype Vulnerability Scan (Container Image Scanning)
CIS - Anchore Grype Vulnerability Scan (Container Image Scanning)
CIS - Trivy Container Image Scanning
CIS - Trivy Container Image Scanning
CodeQL
CodeQL
Copilot code review
Copilot code review
Copilot coding agent
Copilot coding agent
DAST - Zed Attack Proxy (ZAP) Full Scan
DAST - Zed Attack Proxy (ZAP) Full Scan
Dependabot Updates
Dependabot Updates
Dependency Review
Dependency Review
Show more workflows...
Management
Caches
Deployments
SCA - Dependency Review
SCA - Dependency Review
Actions
Loading...
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading.
Please reload this page
.
will be ignored since log searching is not yet available
Show workflow options
Create status badge
Create status badge
Loading
Uh oh!
There was an error while loading.
Please reload this page
.
SCA-GitHubAdvancedSecurity-DependencyReview.yml
will be ignored since log searching is not yet available
65 workflow runs
65 workflow runs
Event
Filter by Event
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching events.
Status
Filter by Status
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching statuses.
Branch
Filter by Branch
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching branches.
Actor
Filter by Actor
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching users.
Bump Microsoft.Data.SqlClient from 5.0.2 to 7.0.2
SCA - Dependency Review
#166:
Pull request
#166
opened by
dependabot
Bot
12s
dependabot/nuget/src/webapp01/Microsoft.Data.SqlClient-7.0.2
dependabot/nuget/src/webapp01/Microsoft.Data.SqlClient-7.0.2
12s
View #166
View workflow file
Bump System.Text.Json from 9.0.13 to 10.0.9
SCA - Dependency Review
#165:
Pull request
#165
opened by
dependabot
Bot
16s
dependabot/nuget/src/webapp01/System.Text.Json-10.0.9
dependabot/nuget/src/webapp01/System.Text.Json-10.0.9
16s
View #165
View workflow file
Bump System.Text.Json from 9.0.13 to 10.0.8
SCA - Dependency Review
#164:
Pull request
#164
opened by
dependabot
Bot
10s
dependabot/nuget/src/webapp01/System.Text.Json-10.0.8
dependabot/nuget/src/webapp01/System.Text.Json-10.0.8
10s
View #164
View workflow file
Bump System.Text.Json from 9.0.13 to 10.0.7
SCA - Dependency Review
#163:
Pull request
#163
opened by
dependabot
Bot
15s
dependabot/nuget/src/webapp01/System.Text.Json-10.0.7
dependabot/nuget/src/webapp01/System.Text.Json-10.0.7
15s
View #163
View workflow file
Bump Microsoft.Data.SqlClient from 5.0.2 to 7.0.1
SCA - Dependency Review
#162:
Pull request
#162
opened by
dependabot
Bot
13s
dependabot/nuget/src/webapp01/Microsoft.Data.SqlClient-7.0.1
dependabot/nuget/src/webapp01/Microsoft.Data.SqlClient-7.0.1
13s
View #162
View workflow file
Bump System.Text.Json from 9.0.13 to 10.0.6
SCA - Dependency Review
#161:
Pull request
#161
opened by
dependabot
Bot
11s
dependabot/nuget/src/webapp01/System.Text.Json-10.0.6
dependabot/nuget/src/webapp01/System.Text.Json-10.0.6
11s
View #161
View workflow file
Bump Azure.Identity from 1.13.2 to 1.21.0
SCA - Dependency Review
#160:
Pull request
#160
opened by
dependabot
Bot
9s
dependabot/nuget/src/webapp01/Azure.Identity-1.21.0
dependabot/nuget/src/webapp01/Azure.Identity-1.21.0
9s
View #160
View workflow file
Bump Azure.Identity from 1.13.2 to 1.20.0
SCA - Dependency Review
#159:
Pull request
#159
opened by
dependabot
Bot
12s
dependabot/nuget/src/webapp01/Azure.Identity-1.20.0
dependabot/nuget/src/webapp01/Azure.Identity-1.20.0
12s
View #159
View workflow file
feat: Add initial Dockerfile, Pipfile.lock, and Terraform example for…
SCA - Dependency Review
#158:
Pull request
#158
opened by
CalinL
13s
demo-devsecops-02
demo-devsecops-02
13s
View #158
View workflow file
Bump advanced-security/spdx-dependency-submission-action from 0.1.1 to 0.2.0
SCA - Dependency Review
#157:
Pull request
#157
opened by
dependabot
Bot
11s
dependabot/github_actions/advanced-security/spdx-dependency-submission-action-0.2.0
dependabot/github_actions/advanced-security/spdx-dependency-submission-action-0.2.0
11s
View #157
View workflow file
Bump actions/upload-artifact from 4.6.1 to 7.0.0
SCA - Dependency Review
#156:
Pull request
#156
opened by
dependabot
Bot
10s
dependabot/github_actions/actions/upload-artifact-7.0.0
dependabot/github_actions/actions/upload-artifact-7.0.0
10s
View #156
View workflow file
Bump azure/webapps-deploy from 8db8b8d14f21b245e6706fd0607244e354884697 to 45c7df8f6a4fe841b67ff88920b33f4f8328f8d9
SCA - Dependency Review
#155:
Pull request
#155
opened by
dependabot
Bot
9s
dependabot/github_actions/azure/webapps-deploy-45c7df8f6a4fe841b67ff88920b33f4f8328f8d9
dependabot/github_actions/azure/webapps-deploy-45c7df8f6a4fe841b67ff88920b33f4f8328f8d9
9s
View #155
View workflow file
Bump anchore/sbom-action from 0.20.5 to 0.24.0
SCA - Dependency Review
#154:
Pull request
#154
opened by
dependabot
Bot
12s
dependabot/github_actions/anchore/sbom-action-0.24.0
dependabot/github_actions/anchore/sbom-action-0.24.0
12s
View #154
View workflow file
Add initial Dockerfile, Pipfile.lock, and Terraform configuration for…
SCA - Dependency Review
#153:
Pull request
#153
opened by
CalinL
13s
demo-devsecops
demo-devsecops
13s
View #153
View workflow file
Update workflow actions to latest versions for improved security and …
SCA - Dependency Review
#152:
Pull request
#152
opened by
CalinL
13s
update-workflows
update-workflows
13s
View #152
View workflow file
Bump Microsoft.Data.SqlClient from 5.0.2 to 7.0.0
SCA - Dependency Review
#151:
Pull request
#151
opened by
dependabot
Bot
12s
dependabot/nuget/src/webapp01/Microsoft.Data.SqlClient-7.0.0
dependabot/nuget/src/webapp01/Microsoft.Data.SqlClient-7.0.0
12s
View #151
View workflow file
Bump System.Text.Json from 9.0.13 to 10.0.5
SCA - Dependency Review
#150:
Pull request
#149
opened by
dependabot
Bot
10s
dependabot/nuget/src/webapp01/System.Text.Json-10.0.5
dependabot/nuget/src/webapp01/System.Text.Json-10.0.5
10s
View #149
View workflow file
Bump Azure.Identity from 1.13.2 to 1.19.0
SCA - Dependency Review
#149:
Pull request
#148
opened by
dependabot
Bot
10s
dependabot/nuget/src/webapp01/Azure.Identity-1.19.0
dependabot/nuget/src/webapp01/Azure.Identity-1.19.0
10s
View #148
View workflow file
added tools to the custom agents
SCA - Dependency Review
#148:
Pull request
#147
opened by
emmanuelknafo
11s
feature/added-tools-to-agents-properly
feature/added-tools-to-agents-properly
11s
View #147
View workflow file
Bump Azure.Identity from 1.13.2 to 1.18.0
SCA - Dependency Review
#147:
Pull request
#146
opened by
dependabot
Bot
9s
dependabot/nuget/src/webapp01/Azure.Identity-1.18.0
dependabot/nuget/src/webapp01/Azure.Identity-1.18.0
9s
View #146
View workflow file
Bump aquasecurity/trivy-action from 0.32.0 to 0.34.0 in /.github/workflows in the github_actions group across 1 directory
SCA - Dependency Review
#146:
Pull request
#145
opened by
dependabot
Bot
10s
dependabot/github_actions/dot-github/workflows/github_actions-9bddd90c58
dependabot/github_actions/dot-github/workflows/github_actions-9bddd90c58
10s
View #145
View workflow file
Bump System.Text.Json from 9.0.11 to 10.0.3
SCA - Dependency Review
#145:
Pull request
#144
opened by
dependabot
Bot
11s
dependabot/nuget/src/webapp01/System.Text.Json-10.0.3
dependabot/nuget/src/webapp01/System.Text.Json-10.0.3
11s
View #144
View workflow file
Add demo files with intentional security vulnerabilities for GitHub A…
SCA - Dependency Review
#142:
Pull request
#142
opened by
CalinL
10s
feature/devsecops-demo-code04
feature/devsecops-demo-code04
10s
View #142
View workflow file
Demo-Code02 - Add demo files with intentional security vulnerabilities for GitHub A…
SCA - Dependency Review
#138:
Pull request
#138
opened by
CalinL
13s
feature/devsecops-demo-code02
feature/devsecops-demo-code02
13s
View #138
View workflow file
feat: Add DevSecOps-7809 demo page with intentional vulnerabilities for GHAS demonstration
SCA - Dependency Review
#137:
Pull request
#137
synchronize by
Copilot
AI
11s
copilot/featuredevsecops-demo-4823
copilot/featuredevsecops-demo-4823
11s
View #137
View workflow file
Previous
1
2
3
Next
You can’t perform that action at this time.