There’s also virustotal, any.run, probably a few others outside of GitHub/gitlab scans