Version updated for https://github.com/willibrandon/picket to version v0.2.8. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Picket is a MIT-licensed secrets scanner for .NET that provides a Gitleaks-compatible command surface, Picket-native scanning capabilities, Native AOT release binaries, dotnet tool packages, and embeddable AOT-safe libraries. It can scan staged, unstaged, and untracked Git changes, Hugging Face models, datasets, Spaces, or buckets with read-only tokens stored in an environment variable, and GitLab issues, comments, releases, and release assets. The action supports CI integrations for GitHub Actions and Azure Pipelines, and it provides a Coding Agent Guards tool to inspect Codex and Claude hook events. Picket also publishes embeddable packages for rules, scanning, reporting, security, and documentation.

Version updated for https://github.com/yuvrajangadsingh/vibecheck to version v1.15.0. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary The vibecheck GitHub Action automates the detection of AI-generated code smells through ESLint rules. It helps identify common patterns in generated code such as hardcoded secrets, empty catch blocks, and insecure SQL queries. The action runs locally, is zero-config, and provides real-time feedback on issues found in your codebase.

Version updated for https://github.com/pmaojo/yunq to version v0.3.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary The yunq action is a tool that provides static analysis and code quality checks in Rust. It automates the process of analyzing code before it reaches disk, ensuring that AI agents are judged by the same guardrail as the platform itself. The key capabilities include:

Version updated for https://github.com/postman-cs/postman-repo-sync-action to version v2.8.7. This publisher is shown as ‘verified’ by GitHub. This action is used across all versions by 0 repositories. Action Type This is a Node action using Node version 24. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action exports Postman collections and environments into a repository, wires CI, mock servers, and monitors around them. It automates the onboarding of Postman projects to an organization’s repository by synchronizing assets and configuring CI workflows.

Version updated for https://github.com/QWED-AI/qwed-verification to version v6.0.0. This action is used across all versions by 0 repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. Action Summary QWED Verification is a production-grade, model-agnostic trust boundary designed to detect and prevent AI hallucinations. It works with any LLM through local models or Docker images, ensuring deterministic verification before output enters production. What’s Changed v6.0.0 — Trust Boundary Completion Completes the Trust Boundary Completion epic (#263) — all 12/12 sub-issues closed. Every verification API pathway now returns DiagnosticResult and routes through enforce_trust_decision. The trust boundary is no longer advisory: the control plane requires and verifies attestation before admitting VERIFIED results, and VERIFIED is a protocol guarantee backed by a non-empty, deterministic proof_ref — never by execution, agreement, confidence, or provenance.

Version updated for https://github.com/revanite-io/osps-baseline-action to version v1.3.4. This action is used across all versions by 33 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary The GitHub Action for OSPS Baseline automates security assessments against the Open Source Project Security Baseline by running predefined controls on a GitHub repository. It outputs results in YAML, JSON, or SARIF format, allowing users to integrate assessment reports into their CI/CD pipelines and automatically upload them to GitHub’s Security tab as SARIF files.

Version updated for https://github.com/RewithSolo/arcana-gate to version v1.0.0. This action is used across all versions by 0 repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. Action Summary Arcana Gate is a deterministic quality gate CLI tool and GitHub Action that uses Tarot Major Arcana to delegate deployment decisions. It ensures that only high-quality code passes through the pipeline, reducing risks associated with unpredictable deployments. The action provides strict cryptographic engineering, ensuring reproducibility across different runners and executions.

Version updated for https://github.com/RivieraKid/gha-kaniko to version v1. This action is used across all versions by ? repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action prints a greeting message to the log, either “Hello World” or “Hello” followed by the name of the person specified. It automatically handles various inputs and outputs for easy integration into workflows.

Version updated for https://github.com/rosenjcb/spec.md to version v0.3.6. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary spec.md is a framework that turns Markdown specifications into a shared source of truth between humans, coding agents, and CI. It ensures alignment by enforcing the structure and ensuring that every QA test case in a spec has a corresponding [TC-N] identifier, thus preventing drift between the system and its documentation.

Version updated for https://github.com/s-thom/create-robots-txt-action to version v3.0.0. This action is used across all versions by 6 repositories. Action Type This is a Node action using Node version 24. Go to the GitHub Marketplace to find the latest changes. Action Summary The Create Robots.txt Action generates a robots.txt file from various sources, including existing files, cloudflare API tokens to fetch bot categories, known agents API tokens to fetch user agent categories, and allows users to specify allowed and blocked bot names. It automates the creation of a robots.txt file for web scraping and SEO purposes by appending allow rules for all unspecified user agents if requested.