security-and-hardening
Harden code against vulnerabilities in input handling, auth, and data storage per the OWASP Top Ten
108k GitHub starsupdated Oct 3, 2026
Loading…
Lập trình
Harden code against vulnerabilities in input handling, auth, and data storage per the OWASP Top Ten
Harden GitHub Actions workflows against script injection, privileged triggers, and unpinned actions
Configure GitHub secret scanning, push protection, custom patterns, and secret alert remediation
Threat model a repository: trust boundaries, assets, attacker paths, and mitigations in Markdown
Security-review code changes, measure blast radius, check test coverage, and produce a markdown report
Run Semgrep security scans with language-matched rulesets, approved before running, and merged results
Audit dependencies for supply-chain risk: advisories, abandoned packages, npm publishers, install scripts
Find bugs, security vulnerabilities, and quality issues in your current branch changes
Review GitHub Actions workflows for exploitable flaws like pwn requests and expression injection