chainsec — dependency chain supply audit

Version updated for https://github.com/ocku/chainsec to version 0.5.2.

  • This action is used across all versions by ? repositories.

Action Type

This is a Docker action.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

chainsec is a tool for auditing dependency chains in Python, JavaScript, and TypeScript projects. It discovers dependencies, enriches them with lockfile information, securely acquires verified artifacts, scans sources with versioned Tree-sitter rules, and generates JSON, SARIF, or terminal reports. It can be used as a CI component and offers safe defaults by default, without launching executables or executing package code.

What’s Changed

  • Release/0.5.2 (#10) (5f13230)
  • chore: release 0.5.1 — improve human output for scans and diffs (#8) (5131eda)
  • Simplify architecture diagram in README, bump limits (#7) (01cb5e3)
  • Harden io-related subsystems, improve rules, rework cli, add diffing (#6) (fedc986)
  • Release 0.4.0 (#5) (8631275)
  • chore: update demo (#4) (527dd61)
  • Release 0.3.0 (#3) (3f6f46c)
  • Release 0.2.1 (#2) (2ef7230)
  • Scope CI triggers to main (b646594)
  • Harden archive extraction checks (faabb7a)