| react-profiling | 0 |
| react-import-map | react,react-dom,react-dom/client,react-dom/profiling,react-is,react-reconciler,react/compiler-runtime,react/jsx-dev-runtime,react/jsx-runtime,scheduler@d5750093facf |
| route-pattern | /:user_id/:repository |
| route-controller | files |
| route-action | disambiguate |
| fetch-nonce | v2:55327d03-eb37-dec6-8b3b-d09e2ce5a20d |
| current-catalog-service-hash | f3abb0cc802f3d7b95fc8762b94bdcb13bf39634c40c357301c4aa1d67a256fb |
| request-id | B232:8ECA6:479E9F:63BD2C:6AF84256 |
| html-safe-nonce | b4da548ee72bd7918ec5a51fc47652a8b63db622fa93a41268a744708a572017 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJCMjMyOjhFQ0E2OjQ3OUU5Rjo2M0JEMkM6NkFGODQyNTYiLCJ2aXNpdG9yX2lkIjoiNzUyNzQ5NzA5NjkxOTk0NzEwIiwicmVnaW9uX2VkZ2UiOiJpYWQiLCJyZWdpb25fcmVuZGVyIjoiaWFkIn0= |
| visitor-hmac | 3b37f431b1af4513ea86d7f6e634cd2bdbcaeb83fc2715ab053dd16e92fc6a93 |
| hovercard-subject-tag | repository:1232862300 |
| github-keyboard-shortcuts | repository,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | // |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/NVIDIA/security-workflows |
| twitter:image | https://opengraph.githubassets.com/cb38f99b00041cdae61629dd22854c2679a50611931de75354c3bbc3dadd6f45/NVIDIA/security-workflows |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/cb38f99b00041cdae61629dd22854c2679a50611931de75354c3bbc3dadd6f45/NVIDIA/security-workflows |
| og:image:alt | Centrally maintained reusable workflows for GitHub-First security scans — including secret, license, SCA, malware, SAST, and guardwords. - NVIDIA/security-workflows |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| hostname | github.com |
| expected-hostname | github.com |
| None | 5713ecd83001b2f55c3509fb7a292bf7d66d0f167c7ae87a9f7eaec5a52bf8db |
| turbo-cache-control | no-cache |
| go-import | github.com/NVIDIA/security-workflows git https://github.com/NVIDIA/security-workflows.git |
| octolytics-dimension-user_id | 1728152 |
| octolytics-dimension-user_login | NVIDIA |
| octolytics-dimension-repository_id | 1232862300 |
| octolytics-dimension-repository_nwo | NVIDIA/security-workflows |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 1232862300 |
| octolytics-dimension-repository_network_root_nwo | NVIDIA/security-workflows |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 653be32ff5c755082a4db662491bfbbcfc9112c1 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
| Skip to content | https://github.com/NVIDIA/security-workflows#start-of-content |
| https://github.com/ |
| Sign in | https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FNVIDIA%2Fsecurity-workflows |
| GitHubRepository hosting, code review, and collaboration | https://github.com/platform |
| CopilotAI coding agent for tasks, projects, and automated work | https://github.com/features/copilot |
| ActionsCI/CD and automation | https://github.com/features/actions |
| Code QualityQuality analysis, fixes, and enforcement | https://github.com/features/code-quality |
| CodespacesCloud development environments | https://github.com/features/codespaces |
| Code SecurityVulnerability detection and remediation | https://github.com/security/advanced-security/code-security |
| Secret ProtectionSecret scanning and leak prevention | https://github.com/security/advanced-security/secret-protection |
| All Features | https://github.com/features |
| Documentation | https://docs.github.com/en |
| Training | https://learn.github.com/skills |
| Certifications | https://learn.github.com/credentials |
| Build with Copilot | https://github.com/features/ai |
| Customize Copilot | https://docs.github.com/en/copilot/how-tos/copilot-on-github/customize-copilot/customize-copilot-overview |
| Integrations | https://github.com/marketplace |
| Trending repos | https://github.com/trending |
| GitHub Sponsors | https://github.com/open-source/sponsors |
| Developer articles | https://github.com/resources/articles |
| ChangelogYour source for the latest features, improvements, and fixes across GitHub products, all in one place. | https://github.blog/changelog/ |
| Enterprises | https://github.com/enterprise |
| Team | https://github.com/team |
| Startups | https://github.com/enterprise/startups |
| Nonprofits | https://github.com/solutions/industry/nonprofits |
| Healthcare | https://github.com/solutions/industry/healthcare |
| Financial services | https://github.com/solutions/industry/financial-services |
| Manufacturing | https://github.com/solutions/industry/manufacturing |
| Government | https://github.com/solutions/industry/government |
| See all industries | https://github.com/solutions/industry |
| Why GitHub | https://github.com/why-github |
| Customer Stories | https://github.com/customer-stories |
| Business insights | https://github.com/solutions/executive-insights |
| Trust Center | https://github.com/trust-center |
| GitHub Advanced SecurityEnterprise-grade code security | https://github.com/security/advanced-security |
| Copilot for businessEnterprise-grade AI features | https://github.com/features/copilot/copilot-business |
| Premium SupportEnterprise-grade 24/7 support | https://github.com/enterprise/premium-support |
| Documentation | https://docs.github.com/en |
| Resource center | https://github.com/resources |
| Blog | https://github.blog/ |
| Events & webinars | https://github.com/resources/events |
| Community Forum | https://github.com/orgs/community/discussions |
| Customer Stories | https://github.com/customer-stories |
| Integrations | https://github.com/marketplace |
| Customer support | https://help.github.com/ |
| Training | https://learn.github.com/skills |
| GitHub Status | https://www.githubstatus.com/ |
| About | https://github.com/about |
| Partners | https://github.com/partners |
| Changelog | https://github.blog/changelog/ |
| GitHub UniverseThe event for developers, by developers — talks, workshops, and what’s next for GitHub. | https://githubuniverse.com/ |
| Pricing | https://github.com/pricing |
| Sign in | https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FNVIDIA%2Fsecurity-workflows |
| Sign up | https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E&source=header-repo&source_repo=NVIDIA%2Fsecurity-workflows |
| Reload | https://github.com/NVIDIA/security-workflows |
| Reload | https://github.com/NVIDIA/security-workflows |
| Reload | https://github.com/NVIDIA/security-workflows |
| NVIDIA | https://github.com/NVIDIA |
| security-workflows | https://github.com/NVIDIA/security-workflows |
| Code | https://github.com/NVIDIA/security-workflows |
| Issues | https://github.com/NVIDIA/security-workflows/issues |
| Pull requests1 (1) | https://github.com/NVIDIA/security-workflows/pulls |
| Actions | https://github.com/NVIDIA/security-workflows/actions |
| Projects | https://github.com/NVIDIA/security-workflows/projects |
| Security and quality | https://github.com/NVIDIA/security-workflows/security |
| Insights | https://github.com/NVIDIA/security-workflows/pulse |
| https://github.com/NVIDIA/security-workflows |
| security-workflows | https://github.com/NVIDIA/security-workflows |
| Notifications | https://github.com/login?return_to=%2FNVIDIA%2Fsecurity-workflows |
| Fork4 (4) | https://github.com/login?return_to=%2FNVIDIA%2Fsecurity-workflows |
| Star10 (10) | https://github.com/login?return_to=%2FNVIDIA%2Fsecurity-workflows |
| Readme | https://github.com/NVIDIA/security-workflows#readme-ov-file |
| Apache-2.0 license | https://github.com/NVIDIA/security-workflows#Apache-2.0-1-ov-file |
| Code of conduct | https://github.com/NVIDIA/security-workflows#coc-ov-file |
| Contributing | https://github.com/NVIDIA/security-workflows#contributing-ov-file |
| Security policy | https://github.com/NVIDIA/security-workflows#security-ov-file |
| Activity | https://github.com/NVIDIA/security-workflows/activity |
| Custom properties | https://github.com/NVIDIA/security-workflows/custom-properties |
| 4 forks | https://github.com/NVIDIA/security-workflows/forks |
| Report repository | https://github.com/contact/report-content?content_url=https%3A%2F%2Fgithub.com%2FNVIDIA%2Fsecurity-workflows&report=NVIDIA+%28user%29 |
| Branches | https://github.com/NVIDIA/security-workflows/branches |
| Tags | https://github.com/NVIDIA/security-workflows/tags |
| https://github.com/NVIDIA/security-workflows/branches |
| https://github.com/NVIDIA/security-workflows/tags |
| 31 Commits | https://github.com/NVIDIA/security-workflows/commits/main/ |
| https://github.com/NVIDIA/security-workflows/commits/main/ |
| .github | https://github.com/NVIDIA/security-workflows/tree/main/.github |
| .github | https://github.com/NVIDIA/security-workflows/tree/main/.github |
| docs/vuln-scan | https://github.com/NVIDIA/security-workflows/tree/main/docs/vuln-scan |
| docs/vuln-scan | https://github.com/NVIDIA/security-workflows/tree/main/docs/vuln-scan |
| hooks | https://github.com/NVIDIA/security-workflows/tree/main/hooks |
| hooks | https://github.com/NVIDIA/security-workflows/tree/main/hooks |
| .codespell-ignore.txt | https://github.com/NVIDIA/security-workflows/blob/main/.codespell-ignore.txt |
| .codespell-ignore.txt | https://github.com/NVIDIA/security-workflows/blob/main/.codespell-ignore.txt |
| .gitignore | https://github.com/NVIDIA/security-workflows/blob/main/.gitignore |
| .gitignore | https://github.com/NVIDIA/security-workflows/blob/main/.gitignore |
| .pre-commit-config.yaml | https://github.com/NVIDIA/security-workflows/blob/main/.pre-commit-config.yaml |
| .pre-commit-config.yaml | https://github.com/NVIDIA/security-workflows/blob/main/.pre-commit-config.yaml |
| .pre-commit-hooks.yaml | https://github.com/NVIDIA/security-workflows/blob/main/.pre-commit-hooks.yaml |
| .pre-commit-hooks.yaml | https://github.com/NVIDIA/security-workflows/blob/main/.pre-commit-hooks.yaml |
| .yamllint.yaml | https://github.com/NVIDIA/security-workflows/blob/main/.yamllint.yaml |
| .yamllint.yaml | https://github.com/NVIDIA/security-workflows/blob/main/.yamllint.yaml |
| AGENTS.md | https://github.com/NVIDIA/security-workflows/blob/main/AGENTS.md |
| AGENTS.md | https://github.com/NVIDIA/security-workflows/blob/main/AGENTS.md |
| CHANGELOG.md | https://github.com/NVIDIA/security-workflows/blob/main/CHANGELOG.md |
| CHANGELOG.md | https://github.com/NVIDIA/security-workflows/blob/main/CHANGELOG.md |
| CLAUDE.md | https://github.com/NVIDIA/security-workflows/blob/main/CLAUDE.md |
| CLAUDE.md | https://github.com/NVIDIA/security-workflows/blob/main/CLAUDE.md |
| CODE_OF_CONDUCT.md | https://github.com/NVIDIA/security-workflows/blob/main/CODE_OF_CONDUCT.md |
| CODE_OF_CONDUCT.md | https://github.com/NVIDIA/security-workflows/blob/main/CODE_OF_CONDUCT.md |
| CONTRIBUTING.md | https://github.com/NVIDIA/security-workflows/blob/main/CONTRIBUTING.md |
| CONTRIBUTING.md | https://github.com/NVIDIA/security-workflows/blob/main/CONTRIBUTING.md |
| GOVERNANCE.md | https://github.com/NVIDIA/security-workflows/blob/main/GOVERNANCE.md |
| GOVERNANCE.md | https://github.com/NVIDIA/security-workflows/blob/main/GOVERNANCE.md |
| LICENSE | https://github.com/NVIDIA/security-workflows/blob/main/LICENSE |
| LICENSE | https://github.com/NVIDIA/security-workflows/blob/main/LICENSE |
| MAINTAINERS.md | https://github.com/NVIDIA/security-workflows/blob/main/MAINTAINERS.md |
| MAINTAINERS.md | https://github.com/NVIDIA/security-workflows/blob/main/MAINTAINERS.md |
| NOTICE | https://github.com/NVIDIA/security-workflows/blob/main/NOTICE |
| NOTICE | https://github.com/NVIDIA/security-workflows/blob/main/NOTICE |
| README.md | https://github.com/NVIDIA/security-workflows/blob/main/README.md |
| README.md | https://github.com/NVIDIA/security-workflows/blob/main/README.md |
| ROADMAP.md | https://github.com/NVIDIA/security-workflows/blob/main/ROADMAP.md |
| ROADMAP.md | https://github.com/NVIDIA/security-workflows/blob/main/ROADMAP.md |
| SECURITY.md | https://github.com/NVIDIA/security-workflows/blob/main/SECURITY.md |
| SECURITY.md | https://github.com/NVIDIA/security-workflows/blob/main/SECURITY.md |
| SUPPORT.md | https://github.com/NVIDIA/security-workflows/blob/main/SUPPORT.md |
| SUPPORT.md | https://github.com/NVIDIA/security-workflows/blob/main/SUPPORT.md |
| THIRD_PARTY_NOTICES.md | https://github.com/NVIDIA/security-workflows/blob/main/THIRD_PARTY_NOTICES.md |
| THIRD_PARTY_NOTICES.md | https://github.com/NVIDIA/security-workflows/blob/main/THIRD_PARTY_NOTICES.md |
| pyproject.toml | https://github.com/NVIDIA/security-workflows/blob/main/pyproject.toml |
| pyproject.toml | https://github.com/NVIDIA/security-workflows/blob/main/pyproject.toml |
| README | https://github.com/NVIDIA/security-workflows |
| Code of conduct | https://github.com/NVIDIA/security-workflows |
| Contributing | https://github.com/NVIDIA/security-workflows |
| Apache-2.0 license | https://github.com/NVIDIA/security-workflows |
| Security | https://github.com/NVIDIA/security-workflows |
| Contributing | https://github.com/NVIDIA/security-workflows/blob/main/CONTRIBUTING.md |
| Security | https://github.com/NVIDIA/security-workflows/blob/main/SECURITY.md |
| Support | https://github.com/NVIDIA/security-workflows/blob/main/SUPPORT.md |
| Governance | https://github.com/NVIDIA/security-workflows/blob/main/GOVERNANCE.md |
| Maintainers | https://github.com/NVIDIA/security-workflows/blob/main/MAINTAINERS.md |
| Changelog | https://github.com/NVIDIA/security-workflows/blob/main/CHANGELOG.md |
| Third-Party Notices | https://github.com/NVIDIA/security-workflows/blob/main/THIRD_PARTY_NOTICES.md |
| https://github.com/NVIDIA/security-workflows#nvidia-security-workflows |
| .github/workflows/ | https://github.com/NVIDIA/security-workflows/blob/main/.github/workflows/README.md |
| .pre-commit-hooks.yaml | https://github.com/NVIDIA/security-workflows/blob/main/.pre-commit-hooks.yaml |
| hooks/ | https://github.com/NVIDIA/security-workflows/blob/main/hooks/README.md |
| surface-specific policy below | https://github.com/NVIDIA/security-workflows#pin-policy-per-surface |
| Secret scanning | https://github.com/NVIDIA/security-workflows#secret-scanning |
| License scanning | https://github.com/NVIDIA/security-workflows#license-scanning |
| Vulnerability scanning | https://github.com/NVIDIA/security-workflows#vulnerability-scanning |
| Malware scanning | https://github.com/NVIDIA/security-workflows#malware-scanning |
| Static Application Security Testing (SAST) | https://github.com/NVIDIA/security-workflows#static-application-security-testing-sast |
| GuardWords scanning | https://github.com/NVIDIA/security-workflows#guardwords-scanning |
| https://github.com/NVIDIA/security-workflows#overview |
| workflow catalogue | https://github.com/NVIDIA/security-workflows/blob/main/.github/workflows/README.md |
| sast-scan-codeql.yml | https://github.com/NVIDIA/security-workflows/blob/main/.github/workflows/sast-scan-codeql.yml |
| https://github.com/NVIDIA/security-workflows#secret-scanning |
| trufflesecurity/trufflehog | https://github.com/trufflesecurity/trufflehog |
| workflow catalogue | https://github.com/NVIDIA/security-workflows/blob/main/.github/workflows/README.md |
| hook catalogue | https://github.com/NVIDIA/security-workflows/blob/main/hooks/README.md |
| https://github.com/NVIDIA/security-workflows#license-scanning |
| https://github.com/NVIDIA/security-workflows#vulnerability-scanning |
| workflow catalogue | https://github.com/NVIDIA/security-workflows/blob/main/.github/workflows/README.md#vulnerability-scan-sca--vuln-scan-pulse-ossyml |
| https://github.com/NVIDIA/security-workflows#malware-scanning |
| workflow catalogue | https://github.com/NVIDIA/security-workflows/blob/main/.github/workflows/README.md#malware-scan--malware-scan-pulseyml |
| https://github.com/NVIDIA/security-workflows#static-application-security-testing-sast |
| https://github.com/NVIDIA/security-workflows#guardwords-scanning |
| GuardWords hook guide | https://github.com/NVIDIA/security-workflows/blob/main/hooks/guardwords/README.md |
| https://github.com/NVIDIA/security-workflows#example |
| Pin policy per surface | https://github.com/NVIDIA/security-workflows#pin-policy-per-surface |
| .github/workflows/ | https://github.com/NVIDIA/security-workflows/blob/main/.github/workflows/README.md |
| hook catalogue | https://github.com/NVIDIA/security-workflows/blob/main/hooks/README.md |
| https://github.com/NVIDIA/security-workflows#getting-started |
| https://github.com/NVIDIA/security-workflows#consumers-downstream-nvidia-repositories |
| workflow_call | https://docs.github.com/en/actions/using-workflows/reusing-workflows |
| pre-commit | https://pre-commit.com/ |
| Pin policy per surface | https://github.com/NVIDIA/security-workflows#pin-policy-per-surface |
| workflow catalogue | https://github.com/NVIDIA/security-workflows/blob/main/.github/workflows/README.md |
| hook catalogue | https://github.com/NVIDIA/security-workflows/blob/main/hooks/README.md |
| .pre-commit-hooks.yaml | https://github.com/NVIDIA/security-workflows/blob/main/.pre-commit-hooks.yaml |
| SUPPORT.md | https://github.com/NVIDIA/security-workflows/blob/main/SUPPORT.md |
| ROADMAP.md | https://github.com/NVIDIA/security-workflows/blob/main/ROADMAP.md |
| https://github.com/NVIDIA/security-workflows#contributors |
| CONTRIBUTING.md | https://github.com/NVIDIA/security-workflows/blob/main/CONTRIBUTING.md |
| GOVERNANCE.md | https://github.com/NVIDIA/security-workflows/blob/main/GOVERNANCE.md#maintainer-workflow |
| MAINTAINERS.md | https://github.com/NVIDIA/security-workflows/blob/main/MAINTAINERS.md |
| https://github.com/NVIDIA/security-workflows#platform-support |
| https://github.com/NVIDIA/security-workflows#runners |
| runner label catalog | https://nv/gha-runner-labels |
| runner platform documentation | https://nv/gha-runners-docs |
| https://github.com/NVIDIA/security-workflows#github-repository-requirements |
| https://github.com/NVIDIA/security-workflows#onboarding-a-repository |
| nvidia-runner-mgmt | https://nv/gha-runner-app |
| runner configuration repository | https://nv/gha-runner-config |
| Requesting access | https://nv/gha-runner-access |
| Example | https://github.com/NVIDIA/security-workflows#example |
| hook catalogue | https://github.com/NVIDIA/security-workflows/blob/main/hooks/README.md |
| NVIDIA/cccl#10010 | https://github.com/NVIDIA/cccl/pull/10010 |
| NVIDIA/cuda-python#2405 | https://github.com/NVIDIA/cuda-python/pull/2405 |
| https://github.com/NVIDIA/security-workflows#versioning |
| semantic versioning | https://semver.org/ |
| GOVERNANCE.md | https://github.com/NVIDIA/security-workflows/blob/main/GOVERNANCE.md#release-tagging |
| https://github.com/NVIDIA/security-workflows#pin-policy-per-surface |
| CHANGELOG.md | https://github.com/NVIDIA/security-workflows/blob/main/CHANGELOG.md |
| https://github.com/NVIDIA/security-workflows#deprecation-policy |
| CHANGELOG.md | https://github.com/NVIDIA/security-workflows/blob/main/CHANGELOG.md |
| SUPPORT.md | https://github.com/NVIDIA/security-workflows/blob/main/SUPPORT.md |
| https://github.com/NVIDIA/security-workflows#related-projects |
| pre-commit | https://pre-commit.com/ |
| Installation | https://pre-commit.com/#install |
| Usage | https://pre-commit.com/#usage |
| NVIDIA OSS repository template | https://nv/oss-repo-template |
| https://github.com/NVIDIA/security-workflows#repositories-using-these-workflows |
| https://github.com/NVIDIA/security-workflows#security |
| SECURITY.md | https://github.com/NVIDIA/security-workflows/blob/main/SECURITY.md |
| https://github.com/NVIDIA/security-workflows#license |
| LICENSE | https://github.com/NVIDIA/security-workflows/blob/main/LICENSE |
| NOTICE | https://github.com/NVIDIA/security-workflows/blob/main/NOTICE |
| THIRD_PARTY_NOTICES.md | https://github.com/NVIDIA/security-workflows/blob/main/THIRD_PARTY_NOTICES.md |
| Readme | https://github.com/NVIDIA/security-workflows#readme-ov-file |
| Apache-2.0 license | https://github.com/NVIDIA/security-workflows#Apache-2.0-1-ov-file |
| Code of conduct | https://github.com/NVIDIA/security-workflows#coc-ov-file |
| Contributing | https://github.com/NVIDIA/security-workflows#contributing-ov-file |
| Security policy | https://github.com/NVIDIA/security-workflows#security-ov-file |
| Activity | https://github.com/NVIDIA/security-workflows/activity |
| Custom properties | https://github.com/NVIDIA/security-workflows/custom-properties |
| 4 forks | https://github.com/NVIDIA/security-workflows/forks |
| Report repository | https://github.com/contact/report-content?content_url=https%3A%2F%2Fgithub.com%2FNVIDIA%2Fsecurity-workflows&report=NVIDIA+%28user%29 |
|
| https://github.com |
| Terms | https://docs.github.com/site-policy/github-terms/github-terms-of-service |
| Privacy | https://docs.github.com/site-policy/privacy-policies/github-privacy-statement |
| Security | https://github.com/security |
| Status | https://www.githubstatus.com/ |
| Community | https://github.community/ |
| Docs | https://docs.github.com/ |
| Contact | https://support.github.com?tags=dotcom-footer |