Security, Stability, and Code Quality

list.md

Standards

1. Open Source Project Security Baseline - https://baseline.openssf.org/
2. OpenSSF Best Practices Badge Program - https://www.bestpractices.dev/en

GH Actions

Any Lang

1. OpenSSF Scorecard tracking - https://github.com/ossf/scorecard-monitor
2. OSSF Scorecard - https://github.com/marketplace/actions/ossf-scorecard-action
3. Gitleaks Action - https://github.com/marketplace/actions/gitleaks
4. Snyk GitHub Actions - https://github.com/marketplace/actions/snyk
5. Super Linter - https://github.com/marketplace/actions/super-linter
6. TruffleHog - https://github.com/marketplace/actions/trufflehog-oss
7. https://github.com/marketplace/actions/harden-runner
8. Spell Check for code - https://github.com/codespell-project/codespell

Rust

1. rust-clippy - https://github.com/rust-lang/rust-clippy
2. rustfmt - https://github.com/rust-lang/rustfmt

GO

1. Gosec Security Checker - https://github.com/marketplace/actions/gosec-security-checker

Python

1. https://github.com/marketplace/actions/bandit-scan

Local

Any Lang

1. Kingfisher - https://github.com/mongodb/kingfisher
2. Trivy - https://github.com/aquasecurity/trivy
3. OSSF Open Source Package Analysis - https://github.com/ossf/package-analysis
4. TruffleHog - https://github.com/trufflesecurity/trufflehog

Markdown

1. https://prettier.io/

YAML

1. https://github.com/adrienverge/yamllint
2. https://prettier.io/

CI/CD

1. zizmor - https://docs.zizmor.sh/

Python

1. Ruff - https://github.com/astral-sh/ruff
2. isort - https://pypi.org/project/isort/
3. Black - https://github.com/psf/black
4. Pylint - https://pylint.readthedocs.io/en/stable/
5. flake8 - https://flake8.pycqa.org/en/latest/
6. Bandit - https://github.com/PyCQA/bandit

HTML/JS/CSS/etc

1. Biome - https://biomejs.dev/
2. https://prettier.io/
3. https://stylelint.io/

IaC

1. Checkov - https://github.com/bridgecrewio/checkov

Shell Scripts

1. https://github.com/koalaman/shellcheck
2. https://github.com/mvdan/sh