What tools would you utilize to test the security of GitHub/open-source projects that you haven't developed yourself?

My friends and I have been testing tools in Linux for evaluating GitHub projects and their respective security. Does anyone have tips on tools that can be used? We are all noobs at this point and i think people in here could help.

can cybersecurity friends github github projects linux people point projects security test testing testing tools tips tools