mheap / pin-github-actionLinks
Pin your GitHub actions to a specific hash
☆131Updated 4 months ago
Alternatives and similar repositories for pin-github-action
Users that are interested in pin-github-action are comparing it to the libraries listed below
Sorting:
- Orchestrate GitHub Actions Security☆299Updated this week
- Official GitHub Action for OpenSSF Scorecard.☆338Updated this week
- GitHub Action to enable automated security updates and open a issue/PR in repos in an org that have dependency files but no dependabot.ya…☆215Updated this week
- GitHub token permissions Monitor and Advisor actions☆338Updated 3 weeks ago
- A Github Action to ensure that actions are pinned to full length commit SHAs☆46Updated 2 weeks ago
- GitHub Action - Yaml Lint☆108Updated 2 years ago
- GitHub Action to check PRs for signed commits☆56Updated last year
- Generate docs for GitHub actions☆99Updated last week
- An Action for printing OIDC claims in GitHub Actions.☆111Updated last month
- Throw a tag at it and it comes back with a checksum.☆150Updated this week
- A GitHub Action to suggest removal of non-organization members from CODEOWNERS files☆134Updated last week
- Tool to validate GitHub Action and Workflow YAML files☆345Updated this week
- A GitHub App that acts like a Security Token Service (STS) for the Github API☆235Updated this week
- A bot tool to disable and re-enable "Include administrators" option in branch protection☆72Updated last year
- A GitHub Action used for publishing an Action to ghcr.io as an OCI container.☆107Updated 2 months ago
- The GitHub CODEOWNERS file validator☆240Updated last year
- Need to centrally manage and run Actions workflows across multiple repositories? This app does it for you.☆135Updated last year
- Action for generating SBOM attestations for workflow artifacts☆40Updated last week
- GitHub action for Hadolint, A Dockerfile linting tool☆238Updated last month
- Common Release Data for various projects in a consumable format, automatically updated.☆184Updated this week
- The containerbase project's base image source☆47Updated this week
- A GitHub action that performs static analysis for shell scripts using shellcheck, shfmt and checkbashisms.☆145Updated 9 months ago
- Action for generating attestations for workflow artifacts☆61Updated this week
- GitHub Action for creating software bill of materials using Syft.☆206Updated last week
- Generate SBOMs with gh CLI☆195Updated 5 months ago
- Audit your GitHub Actions workflow runs to see exactly which Actions were downloaded☆76Updated this week
- Manage multiple repository updates all at once.☆143Updated last year
- Proof-of-concept SLSA provenance generator for GitHub Actions☆100Updated 3 years ago
- Github Action implementation of SLSA Provenance Generation☆50Updated last week
- GitHub Action to expose GitHub runtime to the workflow☆83Updated last month