github actions "supply-chain-security" keyword
Top 1.3% on github actions
77 versions - Latest release: 2 days ago - 497 dependent repositories - 1,286 stars on GitHub
step-security/harden-runner v2.22.3
Harden-Runner provides runtime security for GitHub-hosted and self-hosted runners77 versions - Latest release: 2 days ago - 497 dependent repositories - 1,286 stars on GitHub
docker/scout-action v1.27.0
List vulnerabilities in images; find better base images and upload an image SBOM to Docker Scout61 versions - Latest release: 8 days ago - 143 stars on GitHub
safedep/pmg v0.33.0
Install Package Manager Guard (PMG) and wrap npm/pip/etc. in this Linux GitHub Actions runner.93 versions - Latest release: 8 days ago - 555 stars on GitHub
garnet-org/action v2.3.0
Execution evidence for code review: what each CI job ran and reached, recorded at the kernel.10 versions - Latest release: about 1 month ago - 17 stars on GitHub
CycodeLabs/cimon-action v1.0.3
Runtime Security Solution for your CI/CD Pipeline34 versions - Latest release: 17 days ago - 1 dependent repositories - 124 stars on GitHub
cycodelabs/cimon-action v1.0.3
Runtime Security Solution for your CI/CD Pipeline34 versions - Latest release: 17 days ago - 125 stars on GitHub
openai/fence v0.12.0
Launch the bundled Fence Linux x64 agent on a supported GitHub-hosted runner47 versions - Latest release: 14 days ago - 162 stars on GitHub
rezmoss/sbomlyze v0.5.4 💰
Compare an SBOM with a git, release, workflow-artifact, URL, or file baseline and gate CI.26 versions - Latest release: 28 days ago - 26 stars on GitHub
notaryproject/notation-action/sign v1.2.2
notation sign target artifact with plugin10 versions - Latest release: over 1 year ago - 20 stars on GitHub
Checkmarx/chainalert-github-action v1
Action for opting in to ChainAlert service1 version - Latest release: almost 5 years ago - 42 stars on GitHub
notaryproject/notation-action/setup v1.2.2
Set up Notation CLI on GitHub Action runners for signing and verifying OCI artifacts10 versions - Latest release: over 1 year ago - 20 stars on GitHub
ryanduguid/release-policy/.github/actions/no-ai-attribution v0.2.0
Check pull request metadata and raw commit identities for authorship credits.2 versions - Latest release: 10 days ago - 0 stars on GitHub
johnbillion/action-wordpress-plugin-attestation 0.7.3 💰
Generates an attestation for the build provenance of a plugin published on the wordpress.org plug...12 versions - Latest release: 5 months ago - 47 stars on GitHub
Top 8.9% on github actions
13 versions - Latest release: about 3 years ago - 23 dependent repositories - 10 stars on GitHub
ossillate-inc/packj-github-action v0.0.12-beta
Use Packj to avoid malicious and other "risky" open-source software dependencies13 versions - Latest release: about 3 years ago - 23 dependent repositories - 10 stars on GitHub
Top 6.6% on github actions
34 versions - Latest release: over 2 years ago - 1 dependent repositories - 887 stars on GitHub
Legit-Labs/legitify v1.0.11
Legitify GitHub Action34 versions - Latest release: over 2 years ago - 1 dependent repositories - 887 stars on GitHub
magmamoose/diatreme v2.21.1 💰
Multi-tool semantic release orchestration for GitHub.com and Enterprise: provenance-verified Dock...118 versions - Latest release: 19 days ago - 0 stars on GitHub
Top 2.7% on github actions
9 versions - Latest release: 3 months ago - 151 stars on GitHub
gensecaihq/Shai-Hulud-2.0-Detector v2.2.0
Detect Shai-Hulud npm supply chain attacks (2.0 + ChainDrop) - 1,240+ packages, SHA256 hashing, I...9 versions - Latest release: 3 months ago - 151 stars on GitHub
oracle/macaron v0.25.0
Run Macaron to analyze artifacts for supply chain security26 versions - Latest release: 3 months ago - 212 stars on GitHub
stacklok/frizbee-action v0.0.6
Automatically correct GitHub Actions and container image tags to digests6 versions - Latest release: 7 months ago - 5 stars on GitHub
hyperpolymath/smtp-notify-action v0.3.0 💰
Send a plain-text notification email from a workflow over SMTPS (implicit TLS, port 465) or START...3 versions - Latest release: about 2 months ago - 1 stars on GitHub
xygeni/xygeni-action v6.4.0
Runs Xygeni Scanner11 versions - Latest release: 8 months ago - 1 dependent repositories - 5 stars on GitHub
listendev/action v0.19.0 removed
Proactive Security Monitoring Inside GitHub Actions.51 versions - Latest release: over 1 year ago - 3 dependent repositories - 15 stars on GitHub
Related Keywords
github-actions
13
security
9
devsecops
7
cicd
6
npm
4
sbom
4
github-action
3
security-hardening
3
hardening
3
actions
3
ebpf
3
docker
3
verify
2
security-tools
2
signing
2
linux
2
sign
2
release-automation
2
notation
2
container
2
open-source
2
golang
2
malware-analysis
2
malware-detection
2
developer-tools
2
runtime-security
2
python
2
semver
2
ci
2
slsa
2
cyclonedx
2
packaging
1
provenance
1
vulnerability-scanner
1
supply-chain-attacks
1
static-analysis
1
security-audit
1
infosec
1
threat-detection
1
supply-chain-attack
1
shai-hulud-2
1
shai-hulud
1
sarif
1
open-source-security
1
npm-security
1
free-service
1
zig
1
zero-dependency
1
veridical-computing
1
reproducible-builds
1
microsoft-365
1
idris2
1
hyperpolymath
1
google-workspace
1
formal-verification
1
epistemic-infrastructure
1
epistemic-computing
1
email-notification
1
cli-tool
1
ci-cd
1
security-scanner
1
sdlc-security
1
gitlab
1
github
1
devops
1
runners
1
network-security
1
egress-filtering
1
dynamic-analysis
1
rust
1
reusable-workflows
1
release
1
nodejs
1
oidc
1
gitversion
1
github-marketplace
1
ghcr
1
dependency-track
1
defectdojo
1
continuous-integration
1
continuous-deployment
1
cloudflare-workers
1
pnpm
1
malicious-code
1
hacktoberfest
1
syft
1
spdx
1
software-supply-chain
1
sbom-tool
1
sbom-score
1
sbom-quality
1
sbom-diff
1
sbom-action
1
ntia
1
ioc
1
dependency-scanning
1
credential-theft
1
code-scanning
1
chaindrop
1
maven
1