Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
step-security
/
secure-repo
Public
Notifications
You must be signed in to change notification settings
Fork
54
Star
332
Code
Issues
71
Pull requests
492
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
All pull requests
New pull request
Search pull requests
is
:
pr
state
:
open
is:pr state:open
Clear filter
Search
Pull requests
Open
492
(492)
Closed
981
(981)
Author
Label
Projects
Milestones
Reviews
Assignee
Sort by
Newest
descending
More items
Comfortable display density
Compact display density
chore(ci): upgrade workflows and templates to Node 24 actions
#2621
·
anurag-stepsecurity
opened
Jul 10, 2026
·
·
ci: apply security best practices
#2537
·
stepsecurity-int[bot]
opened
Aug 10, 2025
Bot
·
·
1
ci: apply security best practices
#2530
·
stepsecurity-int[bot]
opened
Jun 5, 2025
Bot
·
·
1
fix: add package read permission for container jobs
ready to merge
#2527
·
shubham-stepsecurity
opened
May 29, 2025
Member
·
·
1
ci: apply security best practices
#2512
·
stepsecurity-int[bot]
opened
Apr 17, 2025
Bot
·
·
2
[StepSecurity] Apply security best practices
#2508
·
stepsecurity-app[bot]
opened
Mar 25, 2025
Bot
·
·
2
fix: resolve lambda timeout for pinToImmutable settings
#2507
·
shubham-stepsecurity
opened
Feb 12, 2025
Member
·
·
2
Bump actions/upload-artifact from 3.1.0 to 4.4.0
dependencies
github_actions
#2478
·
dependabot[bot]
opened
Sep 2, 2024
Bot
·
·
Bump golang from 1.17 to 1.23
dependencies
docker
#2477
·
dependabot[bot]
opened
Aug 19, 2024
Bot
·
·
Bump github.com/aws/aws-sdk-go from 1.43.45 to 1.55.5
dependencies
go
#2474
·
dependabot[bot]
opened
Aug 5, 2024
Bot
·
·
Bump github.com/docker/docker from 20.10.14+incompatible to 26.1.4+incompatible
dependencies
go
#2473
·
dependabot[bot]
opened
Jul 30, 2024
Bot
·
·
Bump actions/checkout from 3.0.2 to 4.1.7
dependencies
github_actions
#2457
·
dependabot[bot]
opened
Jun 17, 2024
Bot
·
·
Bump step-security/wait-for-secrets from 1.0.3 to 1.2.0
dependencies
github_actions
#2456
·
dependabot[bot]
opened
Jun 17, 2024
Bot
·
·
Bump aws-actions/configure-aws-credentials from 1.6.0 to 4.0.2
dependencies
github_actions
#2452
·
dependabot[bot]
opened
Jun 10, 2024
Bot
·
·
Bump github.com/aws/aws-lambda-go from 1.30.0 to 1.47.0
dependencies
go
#2448
·
dependabot[bot]
opened
Jun 10, 2024
Bot
·
·
Bump golang.org/x/net from 0.0.0-20220421235706-1d1ef9303861 to 0.23.0
dependencies
go
#2446
·
dependabot[bot]
opened
Jun 10, 2024
Bot
·
·
[KB] Add GitHub token permissions for chainguard-dev/actions/setup-registry
knowledge-base
#2444
·
step-security-bot
opened
Apr 1, 2024
Contributor
·
·
[KB] Add GitHub token permissions for chainguard-dev/actions/setup-melange
knowledge-base
#2443
·
step-security-bot
opened
Apr 1, 2024
Contributor
·
·
[KB] Add GitHub token permissions for chainguard-dev/actions/melange-build
knowledge-base
#2442
·
step-security-bot
opened
Apr 1, 2024
Contributor
·
·
[KB] Add GitHub token permissions for cashapp/activate-hermit
knowledge-base
#2441
·
step-security-bot
opened
Mar 29, 2024
Contributor
·
·
[KB] Add GitHub token permissions for jidicula/clang-format-action
knowledge-base
#2440
·
step-security-bot
opened
Mar 27, 2024
Contributor
·
·
[KB] Add GitHub token permissions for actions/create-github-app-token
knowledge-base
#2439
·
step-security-bot
opened
Mar 23, 2024
Contributor
·
·
[KB] Add GitHub token permissions for rui314/setup-mold
knowledge-base
#2438
·
step-security-bot
opened
Mar 23, 2024
Contributor
·
·
[KB] Add GitHub token permissions for JasonEtco/build-and-tag-action
knowledge-base
#2437
·
step-security-bot
opened
Mar 22, 2024
Contributor
·
·
[KB] Add GitHub token permissions for chainguard-dev/actions/gofmt
knowledge-base
#2435
·
step-security-bot
opened
Mar 18, 2024
Contributor
·
·
Previous
1
2
3
4
5
6
7
…
20
Next
You can’t perform that action at this time.