WhiteSource Bolt For GitHub is an app on GitHub’s marketplace that can alert on vulnerable open source components in your repositories in real-time, provide detailed information and even suggest fixes. The app scans public and private repositories to identify open-source components with known vulnerabilities. WhiteSource hopes to make open source security simpler, integrating it into the workflow that is already instinctive part of how developers write code without ever having to leave the products of their products without the help of the tool. To get started with free tool, follow this link to download the free tool.
Source: https://thehackernews.com/2018/12/whitesource-bolt-github-security.html