Plumber Score

Version updated for https://github.com/getplumber/plumber to version v0.4.16.

• This action is used across all versions by 44 repositories.

Action Type

This is a Composite action.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

Plumber is an open-source CI/CD security scanner that uses a Rego policy engine to scan .gitlab-ci.yml and .github/workflows/*.{yml,yaml} files. It helps identify risky patterns and security gaps in CI/CD pipelines, providing comprehensive reports in various formats such as terminal, JSON, SARIF, GitLab SAST, PBOM, and CycloneDX.

Plumber automates security scanning for GitLab CI and GitHub Actions, offering a one-command solution to ensure secure and compliant pipelines. The tool is designed to work with the latest versions of GitLab and GitHub, providing real-time feedback on potential vulnerabilities in your workflows.

What’s Changed

0.4.16 (2026-07-24)

✨ Features

• output: restructure control output into clear Passed/Skipped/Failed sections (78b576f)

👷 CI/CD

• release: pin v0.4.15 refs [skip ci] (5ad6b54)

• Getplumber
• GitHub Actions