Skip to content
@GitHubSecurityLab

GitHub Security Lab

GitHub Security Lab
README.md

GitHub Security Lab’s mission is to empower developers and secure open source. We do that in a number of ways:

  • by finding and disclosing vulnerabilities in open source. We publish our advisories on our website.
  • reviewing advisories that affect open source projects hosted on GitHub and notifying affected developers and maintainers. See GitHub’s advisory database.
  • educating the community and empowering developers via in-person events (you can meet us during any events listed in the event calendar).
  • scaling the security research community’s work with CodeQL Community Packs. See how to get started.

In this organisation, you will find some of our projects aiming to educate the community and empower developers or security researchers. Check out also our team repository at github/securitylab.

Pinned Loading

  1. actions-permissions actions-permissions Public

    GitHub token permissions Monitor and Advisor actions

    Python 383 27

  2. gh-mrva gh-mrva Public

    Run CodeQL queries at scale using Multi-Repository Variant Analysis (MRVA)

    Go 68 5

  3. CodeQL-Community-Packs CodeQL-Community-Packs Public

    Collection of community-driven CodeQL query, library and extension packs

    Java 218 25

  4. codeql-zero-to-hero codeql-zero-to-hero Public

    CodeQL zero to hero blog post series challenges

    CodeQL 175 346

  5. secure-code-challenge secure-code-challenge Public template

    We are excited to present you a code security challenge inspired from real-world code, with which you can feel the thrill of finding a security issue and win a GitHub Shop voucher!

    JavaScript 11

  6. seclab-taskflow-agent seclab-taskflow-agent Public

    GitHub Security Lab Taskflow Agent

    Python 230 29

Repositories

Showing 10 of 17 repositories
  • CodeQL-Community-Packs Public

    Collection of community-driven CodeQL query, library and extension packs

    GitHubSecurityLab/CodeQL-Community-Packs's past year of commit activity
    Java 218 MIT 25 4 9 Updated Sep 10, 2026
  • seclab-taskflows Public

    Example taskflows to use with the GitHub Security Lab Taskflow Agent (https://github.com/GitHubSecurityLab/seclab-taskflow-agent)

    GitHubSecurityLab/seclab-taskflows's past year of commit activity
    Python 77 MIT 22 4 4 Updated Sep 8, 2026
  • seclab-taskflows-fuzzing Public

    An LLM-driven fuzzing pipeline powered by the GitHub Security Lab Taskflow Agent

    GitHubSecurityLab/seclab-taskflows-fuzzing's past year of commit activity
    Python 1 MIT 1 0 0 Updated Aug 27, 2026
  • seclab-taskflow-agent Public

    GitHub Security Lab Taskflow Agent

    GitHubSecurityLab/seclab-taskflow-agent's past year of commit activity
    Python 230 MIT 29 14 10 Updated Aug 21, 2026
  • gh-secure Public

    A GitHub CLI extension to enable security features on repositories following best practices from GitHub Security Lab.

    GitHubSecurityLab/gh-secure's past year of commit activity
    Shell 28 MIT 26 4 0 Updated Aug 14, 2026
  • gh-mrva Public

    Run CodeQL queries at scale using Multi-Repository Variant Analysis (MRVA)

    GitHubSecurityLab/gh-mrva's past year of commit activity
    Go 68 MIT 5 1 3 Updated Jul 3, 2026
  • .github Public
    GitHubSecurityLab/.github's past year of commit activity
    0 0 0 0 Updated May 8, 2026
  • secure-code-challenge Public template

    We are excited to present you a code security challenge inspired from real-world code, with which you can feel the thrill of finding a security issue and win a GitHub Shop voucher!

    GitHubSecurityLab/secure-code-challenge's past year of commit activity
    JavaScript 11 MIT 0 0 1 Updated Feb 13, 2026
  • actions-permissions Public

    GitHub token permissions Monitor and Advisor actions

    GitHubSecurityLab/actions-permissions's past year of commit activity
    Python 383 MIT 27 4 0 Updated Jan 31, 2026
  • pwn-request-scanner Public
    GitHubSecurityLab/pwn-request-scanner's past year of commit activity
    JavaScript 0 MIT 0 0 0 Updated Nov 10, 2025
View all repositories

People

This organization has no public members. You must be a member to see who’s a part of this organization.

Most used topics

codeql gh-extension