| secret-scanning-custom-patterns↗ | 176 | HTML | 1 | 0 |
| policy-as-code↗ | 104 | Python | 15 | 9 |
| awesome-codeql↗ | 88 | — | 5 | 6 |
| advanced-security-material↗ | 80 | Shell | 4 | 9 |
| codeql-extractor-iac↗ | 60 | CodeQL | 6 | 9 |
| maven-dependency-submission-action↗ | 60 | TypeScript | 9 | 7 |
| ghas-to-csv↗ | 42 | Python | 5 | 8 |
| ghas-reviewer-app↗ | 37 | Python | 2 | 1 |
| spdx-dependency-submission-action↗ | 27 | JavaScript | 8 | 1 |
| codeql-development-mcp-server↗ | 27 | TypeScript | 45 | 540 |
| enterprise-security-team↗ | 24 | Python | 2 | 5 |
| sample-codeql-pipeline-config↗ | 23 | — | 2 | 5 |
| secret-scanning-review-action↗ | 22 | PowerShell | 5 | 35 |
| component-detection-dependency-submission-action↗ | 21 | TypeScript | 2 | 7 |
| dismiss-alerts↗ | 21 | Java | 2 | 0 |
| set-codeql-language-matrix↗ | 20 | Python | 2 | 1 |
| github-sbom-toolkit↗ | 17 | TypeScript | 1 | 88 |
| awesome-secret-scanning↗ | 17 | PowerShell | 1 | 1 |
| ghas-license-utilization↗ | 15 | Python | 1 | 0 |
| monorepo-code-scanning-action↗ | 14 | JavaScript | 2 | 19 |
| codeql-sarif-security-standard-annotator↗ | 10 | TypeScript | 6 | 0 |
| codeql-development-toolkit↗ | 9 | C# | 1 | 0 |
| codeql-development-template↗ | 9 | CodeQL | 2 | 8 |
| codeql-summarize↗ | 7 | Python | 2 | 2 |
| codeql-sap-js↗ | 7 | TypeScript | 22 | 92 |
| spotbugs-findsecbugs-action↗ | 6 | — | 1 | 3 |
| gh-ghas-audit↗ | 6 | Go | 1 | 6 |
| codeql-scanner-vscode↗ | 6 | TypeScript | 2 | 4 |
| ghas-api-python-scripts↗ | 5 | Python | 2 | 7 |
| qlsh↗ | 5 | Shell | 1 | 1 |
| cocoapods-dependency-submission-action↗ | 5 | Python | 2 | 2 |
| reusable-workflows↗ | 4 | — | 6 | 15 |
| sarif-toolkit↗ | 4 | Python | 1 | 0 |
| codeql-qtil↗ | 4 | CodeQL | 15 | 19 |
| brew-dependency-submission-action↗ | 3 | Python | 2 | 0 |
| adjust-cvss↗ | 3 | Java | 1 | 1 |
| codeql-extractor-action↗ | 2 | Rust | 13 | 21 |
