Version updated for https://github.com/stranxik/runward to version v0.21.0. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Runward automates the verification of engineering decisions made by AI-generated code, ensuring that all critical design points are followed and documented. It provides a deterministic gate to verify load-bearing decisions and offers comprehensive compliance evidence, making it suitable for ISO 42001, NIST AI RMF, and EU AI Act standards.

Version updated for https://github.com/TimothyJones/github-action-keep-node-current to version v1.1.0. This action is used across all versions by 1 repositories. Action Type This is a Node action using Node version 24. Go to the GitHub Marketplace to find the latest changes. Action Summary The GitHub Action “Keep Node Current” automates the process of keeping Node.js versions declared across a repository synchronized with the official Node.js release schedule. It updates CI matrix configurations, single-version pins in actions/setup-node, .nvmrc, and package.json files, and opens pull requests for each change. The action ensures that all active even (LTS) majors are included and end-of-life majors are removed, while also managing version floors in engines.node. It provides clear commit and PR titles to reflect the changes made.

Version updated for https://github.com/varunchandak/gh-actions-version-audit to version v1.1.8. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action audits your repository’s workflows to identify outdated GitHub Actions, mutable action tags, and CI/CD supply-chain drift. It checks each uses: reference against the GitHub API to ensure it points to the most recent release, reporting any version drift or insecure tag pinning. The action can help prevent supply chain attacks by recommending full-length commit SHA pinning and send Slack notifications for any changes.

Version updated for https://github.com/Londopy/patchnotes to version v2.4.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary The patchnotes GitHub Action parses and validates Keep a Changelog formatted CHANGELOG.md files or YAML changelogs into structured Python objects. It automates tasks such as parsing, diffing changes between versions, validating the format, and rendering changelogs to various formats like HTML, RSS, or plain text. The action is built for use in Python code, shell scripts, and CI/CD pipelines, with pure Python and type support, including YAML parsing.

Version updated for https://github.com/lucianofedericopereira/treegen to version v1.0.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action converts Markdown files into a directory tree, providing options to render the tree in ASCII, SVG, or collapsible format, with support for descriptions and excluding certain files. It supports themes for SVG rendering and can be integrated into any repository without additional dependencies.

Version updated for https://github.com/mammumammi/Secure-soroban-marketplace-Action to version v1.0.2. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary SecureSoroban automates the detection of critical vulnerabilities in Soroban smart contracts by simulating real attack vectors, confirming what actually breaks, and calculating estimated financial loss in XLM and USD. It helps prevent vulnerabilities from reaching mainnet and blocks deployment automatically if critical issues are found. SecureSoroban also includes a local AI agent powered by Qwen2.5-coder:7b for more advanced analysis and targeted attacks.

Version updated for https://github.com/mattybellx/Guardmarly to version v6.6.0. This action is used across all versions by 1 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Guardmarly is a static analysis tool that focuses on identifying and flagging common security issues related to authorization gaps and risky code paths, such as IDOR (Insecure Direct Object Reference) vulnerabilities. It analyzes HTTP routes, checks for authentication guards, and traces data flow to potential sinks, helping developers identify and address these critical security flaws in their applications.

Version updated for https://github.com/Mipiti/mipiti-verify to version v0.47.3. This action is used across all versions by ? repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. Action Summary Mipiti-verify automates the verification of Mipiti threat model assertions using AI models, offering local and online verification options. It supports OpenAI and Anthropic models for Tier 2 verification and provides a command-line interface for running and checking individual assertions locally. The action also includes features to list and report on pending and verified assertions, as well as audit signed reports for integrity and provenance.

Version updated for https://github.com/mtzack-org/upload-ui-evidence to version v1.0.1. This action is used across all versions by ? repositories. Action Type This is a Node action using Node version 24. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action automates the process of uploading UI test evidence from CI/CD pipelines to a private UI Evidence Portal. It supports various testing frameworks like Playwright, Maestro, and Appium, allowing you to visualize and share screenshots, videos, reports, traces, and logs directly from your CI job summaries. The action provides flexibility in specifying which files to upload and handles cases where no evidence is found by configuring the behavior via output options.

Version updated for https://github.com/Octagon-simon/lacuna to version v0.3.5. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Lacuna is a command-line tool that automates the process of writing unit and integration tests for untested code in your project using OpenAI-compatible models. It reads your existing code, identifies parts without coverage, generates corresponding test cases, runs them, and retries those that fail. This ensures that what lands in your repository actually passes, while maintaining the quality of your tests through continuous refactoring.