mheap / pin-github-actionLinks
Pin your GitHub actions to a specific hash
☆141Updated 7 months ago
Alternatives and similar repositories for pin-github-action
Users that are interested in pin-github-action are comparing it to the libraries listed below
Sorting:
- Orchestrate GitHub Actions Security☆303Updated 3 weeks ago
- GitHub token permissions Monitor and Advisor actions☆353Updated last week
- GitHub Action - Yaml Lint☆109Updated 2 years ago
- Official GitHub Action for OpenSSF Scorecard.☆356Updated this week
- GitHub Action to enable automated security updates and open a issue/PR in repos in an org that have dependency files but no dependabot.ya…☆218Updated this week
- Tool to validate GitHub Action and Workflow YAML files☆362Updated last month
- A GitHub Action used for publishing an Action to ghcr.io as an OCI container.☆114Updated 6 months ago
- GitHub Action to check PRs for signed commits☆59Updated last year
- Generate docs for GitHub actions☆101Updated 2 months ago
- A Github Action to ensure that actions are pinned to full length commit SHAs☆48Updated last week
- A GitHub Action to suggest removal of non-organization members from CODEOWNERS files☆136Updated this week
- Throw a tag at it and it comes back with a checksum.☆154Updated this week
- An Action for printing OIDC claims in GitHub Actions.☆117Updated 4 months ago
- The GitHub CODEOWNERS file validator☆244Updated last year
- The containerbase project's base image source☆50Updated this week
- Action for generating attestations for workflow artifacts☆63Updated this week
- GitHub action for Hadolint, A Dockerfile linting tool☆258Updated 4 months ago
- Action for generating SBOM attestations for workflow artifacts☆42Updated this week
- Common Release Data for various projects in a consumable format, automatically updated.☆198Updated this week
- GitHub Action to manage labels on GitHub☆158Updated 2 weeks ago
- Run multiple open source security static analysis tools without the added complexity with OSSAR (Open Source Static Analysis Runner).☆99Updated 3 months ago
- Generate SBOMs with gh CLI☆198Updated 8 months ago
- A GitHub App that acts like a Security Token Service (STS) for the Github API☆303Updated this week
- Run shellcheck with reviewdog☆118Updated 2 weeks ago
- An OIDC client to retrieve a GitHub API scoped token from within an Actions workflow☆33Updated last year
- GitHub Action that waits for check runs☆56Updated this week
- Run zizmor from GitHub Actions!☆47Updated this week
- Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, an…☆955Updated this week
- ☆52Updated 2 months ago
- Github Action implementation of SLSA Provenance Generation☆50Updated this week