postmortem supply-chain gate

Version updated for https://github.com/mlab-sh/postmortem to version v2.3.1.

  • This action is used across all versions by 2 repositories.

Action Type

This is a Composite action.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

postmortem is an all-in-one supply-chain security scanner for modern software projects that inspects dependencies across multiple ecosystems and flags potential compromises like malicious install scripts, typosquats, and compromised maintainers. It provides reputation intelligence, audit your machine, and deep source inspection, all while ensuring no telemetry or network communication unless explicitly requested.

What’s Changed

Full Changelog: https://github.com/mlab-sh/postmortem/compare/v2.3.0...v2.3.1