Hey! Hope it's okay to suggest an addition — I built PR CheckMate and use it on my own repos, so figured it might fit here.
It's a CI PR gate: secret scanning (gitleaks), dependency vulnerability checks (grype, osv-scanner), and every release ships a signed SBOM plus an independent VirusTotal scan. It also runs GitHub Actions workflow and Dockerfile security checks as part of its diff checks.
Totally understand if it's not the right fit for the list — thanks for maintaining it either way!
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/myugan/awesome-cicd-security/pull/30
**Author:** [@Mybono](https://github.com/Mybono)
**Created:** 8/2/2026
**Status:** 🔄 Open
**Base:** `main` ← **Head:** `add-pr-checkmate`
---
### 📝 Commits (1)
- [`55a5140`](https://github.com/myugan/awesome-cicd-security/commit/55a51400167187eedb8e3f2824a8569b247f5710) Add PR CheckMate to Tools
### 📊 Changes
**1 file changed** (+1 additions, -0 deletions)
<details>
<summary>View changed files</summary>
📝 `README.md` (+1 -0)
</details>
### 📄 Description
Hey! Hope it's okay to suggest an addition — I built PR CheckMate and use it on my own repos, so figured it might fit here.
It's a CI PR gate: secret scanning (gitleaks), dependency vulnerability checks (grype, osv-scanner), and every release ships a signed SBOM plus an independent VirusTotal scan. It also runs GitHub Actions workflow and Dockerfile security checks as part of its diff checks.
Links:
https://github.com/Mybono/pr_checkmate_public
https://www.npmjs.com/package/pr-checkmate
Totally understand if it's not the right fit for the list — thanks for maintaining it either way!
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/myugan/awesome-cicd-security/pull/30
Author: @Mybono
Created: 8/2/2026
Status: 🔄 Open
Base:
main← Head:add-pr-checkmate📝 Commits (1)
55a5140Add PR CheckMate to Tools📊 Changes
1 file changed (+1 additions, -0 deletions)
View changed files
📝
README.md(+1 -0)📄 Description
Hey! Hope it's okay to suggest an addition — I built PR CheckMate and use it on my own repos, so figured it might fit here.
It's a CI PR gate: secret scanning (gitleaks), dependency vulnerability checks (grype, osv-scanner), and every release ships a signed SBOM plus an independent VirusTotal scan. It also runs GitHub Actions workflow and Dockerfile security checks as part of its diff checks.
Links:
https://github.com/Mybono/pr_checkmate_public
https://www.npmjs.com/package/pr-checkmate
Totally understand if it's not the right fit for the list — thanks for maintaining it either way!
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.