WhiteSource Bolt for GitHub is a FREE app, which continuously scans all your private and public repos, detects vulnerabilities in open source components and provides suggested fixes.
We've support over 200 programming languages & continuous tracking of open source vulnerabilities databases like the NVD and additional security advisories.