Version updated for https://github.com/clechasseur/rs-cargo to version v5.0.7. This action is used across all versions by 303 repositories. Action Type This is a Node action using Node version 24. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action runs specified cargo commands on a Rust project. It automates the execution of common tasks such as building and testing, and provides transparent support for cross-compilation through optional tools like cross or cargo-hack.

Version updated for https://github.com/digicatapult/check-version to version v1.5.94. This action is used across all versions by 35 repositories. Action Type This is a Node action using Node version 24. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action compares versions in project manifests and checks they are higher than the latest published tag, supporting npm, Cargo, and Poetry package managers. It uses GitHub API tokens to access tags and supports filtering tags with a regular expression. If the local version matches the latest published tag, it can either fail or return a boolean indicating if it’s a new version.

Version updated for https://github.com/Dmitriy129/moodle-github-sync-1 to version test.0.1. This action is used across all versions by 2 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary The moodle-github-sync-1 GitHub Action automates the synchronization of Moodle themes and plugins with their corresponding files on GitHub. It solves the problem of maintaining and updating Moodle resources by allowing developers to push changes from local repositories directly to the remote repository, ensuring consistency across different development environments and platforms.

Version updated for https://github.com/EngineerSamet/sealed-build to version v0.1.1. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action builds a container image and produces an SBOM, refuses to push it if it fails a vulnerability threshold, and signs the result with keyless attestation using pinned commit hashes, ensuring security by maintaining immutable evidence. It addresses trust issues in the supply chain by preventing malicious pushes through mutable tags.

Version updated for https://github.com/getplumber/plumber to version v0.4.16. This action is used across all versions by 44 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Plumber is an open-source CI/CD security scanner that uses a Rego policy engine to scan .gitlab-ci.yml and .github/workflows/*.{yml,yaml} files. It helps identify risky patterns and security gaps in CI/CD pipelines, providing comprehensive reports in various formats such as terminal, JSON, SARIF, GitLab SAST, PBOM, and CycloneDX.

Version updated for https://github.com/homeofe/supply-chain-guard to version v5.17.8. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Supply-chain Guard is an open-source tool designed to scan and analyze dependency chains across various package managers and ecosystems, including npm, Pypi, Cargo, Go, RubyGems, Composer, NuGet, Docker, Terraform, VS Code extensions, GitHub Actions, and repositories. It detects malware campaigns (e.g., GlassWorm, Vidar), fake AI tool repos, account takeovers, and numerous threat indicators across multiple lockfile formats. The action generates CycloneDX SBOMs, validates SLSA provenance, and correlates findings into attack-chain incidents for enhanced security awareness and remediation.

Version updated for https://github.com/iammerus/redflag to version v0.1.1. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Redflag is a cross-platform CLI that scans source files and Git history for secrets using regular-expression rules and heuristic Shannon entropy checks. It helps automate the detection of sensitive information, such as passwords and API keys, in both codebases and version control systems. The action integrates with GitHub Actions to perform secret scanning in CI pipelines.

Version updated for https://github.com/illiahaidar/mcptrustchecker to version 1.10.0. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary MCP Trust Checker is a deterministic security scanner that assesses Model Context Protocol servers to ensure they are safe before connecting them to data. It uses the Capability-Flow Trust Model, an original algorithm, to evaluate servers based on their roles and behavior, identifying threats such as untrusted input ingress, sensitive data sources, and exfiltration paths, ensuring they do not pose a risk.

Version updated for https://github.com/immanuwell/dockerfile-roast to version 1.4.10. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary droast is an opinionated Dockerfile linter that catches bad practices and reports them in a blunt manner. It supports various features such as parsing heredocs, handling parser directives, shell forms, BuildKit flags, Windows paths, and PowerShell, and provides real-time feedback with inline squiggles in VS Code and lint-on-save for Neovim users.

Version updated for https://github.com/ItzEmoji/aeroflare to version v1.13.0. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Summary: The GitHub Action ItzEmoji/aeroflare@v1 automates the process of building and pushing Nix packages to an OCI cache, providing a stateless, zero-infrastructure binary substituter. It supports pushing builds directly from CI without requiring additional tooling on the host machine. The action can build all outputs or specific ones based on changes or specified patterns, making it suitable for continuous integration workflows where Nix is used for packaging and caching dependencies.