Security/Admin GitHub CLI Extensions

Generate SBOMs, inspect security posture, manage tokens, and support admin workflows.

14 extensions 8 active Reviewed 2026-06-08

Use this page when you want a focused entry point for the Security/Admin category. The full catalog can filter the same entries by status, ownership, search text, and Top Picks.

GitHub Security And Admin CLI Extension Guide

Choose an SBOM, CodeQL, token, webhook, repository config, or migration helper.

Extension Best for Status Stars Install
github/gh-gei
Support GitHub Enterprise Importer migration workflows.
Enterprise teams migrating repositories to GitHub Enterprise Cloud. active 455 gh extension install github/gh-gei
Link-/gh-token
Create installation access tokens for GitHub Apps.
Developers working with GitHub App authentication. active 394 gh extension install Link-/gh-token
mona-actions/gh-repo-stats
Collect repository metadata used in GitHub migration work.
Migration specialists gathering repository inventory data. active 389 gh extension install mona-actions/gh-repo-stats
babarot/gh-infra
Manage GitHub infrastructure declaratively with YAML.
Teams that want repository and organization settings as code. active 120 gh extension install babarot/gh-infra
github/gh-classroom
Manage GitHub Classroom workflows from the terminal.
Educators using GitHub Classroom at scale. active 117 gh extension install github/gh-classroom
twelvelabs/gh-repo-config
Manage repository settings from GitHub CLI.
Teams standardizing repository configuration. active 42 gh extension install twelvelabs/gh-repo-config
cli/gh-webhook
Work with GitHub webhooks from GitHub CLI.
Developers testing webhook-driven integrations. active 40 gh extension install cli/gh-webhook
advanced-security/gh-code-scanning
Inspect GitHub code scanning data from the terminal.
Security teams that need quick access to code scanning findings. active 29 gh extension install advanced-security/gh-code-scanning
advanced-security/gh-sbom
Generate software bills of materials with GitHub CLI.
Teams that need SBOM output during release or compliance work. watch 206 gh extension install advanced-security/gh-sbom
GitHubSecurityLab/gh-mrva
Run CodeQL queries at scale with multi-repository variant analysis.
Security researchers analyzing many repositories. watch 66 gh extension install GitHubSecurityLab/gh-mrva
GitHubSecurityLab/gh-qldb
Manage CodeQL databases from GitHub CLI.
Security engineers working directly with CodeQL databases. watch 49 gh extension install GitHubSecurityLab/gh-qldb
github/gh-codeql
Work with CodeQL through GitHub CLI.
Security engineers running CodeQL workflows. watch 39 gh extension install github/gh-codeql
andyfeller/gh-ssh-allowed-signers
Generate SSH allowed signers files for SSH commit signing.
Organizations standardizing SSH signature verification. watch 30 gh extension install andyfeller/gh-ssh-allowed-signers
mislav/gh-repo-collab
Manage repository collaborators from GitHub CLI.
Repository maintainers who manage collaborator access. stale 57 gh extension install mislav/gh-repo-collab