Version updated for https://github.com/zuke-build/zuke to version core-v1.38.0. This action is used across all versions by 1 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action provides a tagged template for running processes with sensible defaults such as throwing on failure and capturing output, ensuring injection safety. It simplifies the process of executing commands and scripts in CI/CD workflows by abstracting away common configuration options, making it easier to focus on task logic without distractions related to environment setup or error handling.

Version updated for https://github.com/OculumDev/oculum-action to version 1.0.4. This action is used across all versions by 1 repositories. Action Type This is a Node action using Node version 20. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action is an AI-based security scanner designed to detect common vulnerabilities in LLM-powered applications. It automatically detects prompt injection, hardcoded secrets, SQL injection, XSS, and more using both traditional SAST techniques and AI-driven validation. The action integrates seamlessly with GitHub to provide PR comments and inline annotations on code changes, making it easy for developers to identify and fix security issues early.

Version updated for https://github.com/Odin-Scan/odin-scan-action to version v1. This action is used across all versions by ? repositories. Action Type This is a Node action using Node version 20. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action automates AI-powered smart contract security analysis for CosmWasm, Solana, and EVM projects. It integrates seamlessly into your workflow to catch vulnerabilities before they reach production by uploading SARIF files for native security alerts, posting summary comments on pull requests, and triggering on-demand scans through PR comments. The action supports multi-platform detection and configurable thresholds for severity levels and output visibility.

Version updated for https://github.com/onmcu/onmcu-action to version v1.1.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action automates the flashing and running of firmware on real MCU hardware using OnMCU, ensuring that the workflow fails if the hardware run fails. It installs the OnMCU CLI, writes a CI config, and invokes onmcu run in a single step, providing minimal overhead. The action is designed to handle various inputs such as board identifier, firmware file, API key, and more, with sensible defaults for missing values.

Version updated for https://github.com/quantakrypto/pqc-tools to version v0.11.0. This action is used across all versions by 1 repositories. Action Type This is a Node action using Node version 24. Go to the GitHub Marketplace to find the latest changes. Action Summary The GitHub Action action (@quantakrypto/action) automates the process of scanning codebases for quantum-vulnerable cryptography using the qScan tool. It integrates seamlessly with CI pipelines, generates SARIF files for upload, annotates code diffs, and fails the build if new quantum vulnerabilities are detected. This ensures that projects remain post-quantum ready throughout development and deployment cycles.

Version updated for https://github.com/sattyamjjain/agent-audit-kit to version v0.3.72. This action is used across all versions by ? repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. Action Summary AgentAuditKit is a security scanner designed to audit AI agent pipelines offline and deterministically. It identifies misconfigurations, hardcoded secrets, tool poisoning, rug pulls, trust boundary violations, and tainted data flows across 10 agent platforms. Unlike hosted scanners, AgentAuditKit runs fully offline without network calls, ensuring reproducibility with a 0% variance in findings across multiple runs. Additionally, it produces auditor-ready compliance-evidence packs using SARIF for GitHub Security tab and PDF reports mapped to 12 security frameworks.

Version updated for https://github.com/severity1/custom-amazon-bedrock-agent-action to version v0.9.0. This action is used across all versions by 1 repositories. Action Type This is a Node action using Node version 16. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action uses Amazon Bedrock Agent to analyze PR files and provide feedback tailored to specific requirements. It supports custom prompts, memory persistence across PRs, integration with Knowledge Bases for context-aware insights, and seamless GitHub integration with PR comments. This tool enhances code quality, security assessments, and performance optimizations by leveraging advanced AI models within the AWS ecosystem.

Version updated for https://github.com/shazib-summar/automated-changelog-gh to version v0.3.0. This action is used across all versions by 1 repositories. Action Type This is a Node action using Node version 24. Go to the GitHub Marketplace to find the latest changes. Action Summary The GitHub Action “Automated Changelog” generates and updates CHANGELOG.md files based on git tags and commit history. It groups commits using Conventional Commits and renders them in Keep a Changelog format. The action can create an entry for a new release or regenerate the entire changelog, linking versions to GitHub compare views and commits/PRs to their pages. Users can specify whether to commit the updated changelog back to the repository.

Version updated for https://github.com/sherpa-sh/Sherpa-Action to version v1.0.0-alpha.6. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Sherpa.sh is an AI-driven infrastructure automation tool that simplifies cloud deployment by allowing developers to describe their needs in plain English. It automatically configures servers, DNS, SSL certificates, CDN, databases, backups, and load balancing using natural language prompts. Key capabilities include open-source transparency, support for multiple clouds and frameworks, and the ability to deploy any application seamlessly.

Version updated for https://github.com/skaldlab/muninn to version v0.3.8. This action is used across all versions by 1 repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. Action Summary Muninn is an open-source security scanner for GitHub Actions pipelines and self-hosted CI that uses multiple best-in-class scanners to detect vulnerabilities in code, configuration, dependencies, and infrastructure. It normalizes the results into a single format and provides detailed reporting options including PR comments, SARIF uploads, and structured JSON, allowing users to easily identify and manage security issues across their workflows.