Security and vulnerability scanning
11 extensions in this category.
| Extension | Stars | Updated | Description |
|---|---|---|---|
| GitHubSecurityLab/gh-secure | 686 | 2026-10-25 | A GitHub CLI extension to enable security features on repositories following best practices from GitHub Security Lab. |
| github/gh-actions-lock | 249 | 2026-10-24 | A gh CLI extension that generates and verifies the GitHub Actions dependency lockfile, pinning every action your workflows use to an exact commit. |
| einride/gh-dependabot | 44 | 2026-06-18 | GitHub CLI extension for reviewing Dependabot PRs. |
| jackchuka/gh-dep | 33 | 2026-10-13 | Interactive TUI for bulk managing dependency PRs. Multi-repo support, keyboard navigation, live settings. A better Dependabot/Renovate workflow. |
| Nick2bad4u/gh-secret-sync | 2 | 2026-10-22 | Sync a GitHub secret or list of secrets across many repos, one repo, etc |
| sbolel/gh-pr-approve-and-auto-merge | 2 | 2026-10-03 | GitHub CLI extension to auto-approve and auto-merge dependency update pull requests (e.g. Dependabot) with one command, streamlining CI/CD workflows. |
| sbresin/gh-dep-triage | 1 | 2026-10-08 | gh extension to triage, bulk-merge and unblock Dependabot & Renovate PRs across all your repos. One row per package@version across all repos, diagnoses what blocks each PR, and checks deps.dev risk. Never merges with failing checks. Has a TUI, plus JSON output and a built-in skill for coding agents. |
| therealkujo/gh-dependabot | 1 | 2023-02-21 | A GH CLI extension for Dependabot |
| shieldly-io/gh-shieldly | 0 | 2026-07-18 | AI-Powered Security Analysis for AWS from the GitHub CLI |
| chadmayfield/gh-repos-hud | 0 | 2026-06-20 | Heads-up display of repo health across your GitHub orgs (gh extension) |
| matteo-sung/gh-lockvet | 0 | 2026-08-15 | GitHub CLI extension: gh lockvet — vet the PR you're standing in for dependency risk (vulns, malware shapes, typosquats, tampering) across 61 lockfile/manifest formats |