Version updated for https://github.com/immanuwell/dockerfile-roast to version 1.4.4. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Summary of the droast GitHub Action The droast GitHub Action is a lint tool that checks Dockerfiles for best practices and potential issues, providing real-time feedback to developers during development. It can catch malformed syntax and catches bad practices in the Dockerfile, offering clear messages about these problems. The action works by analyzing the Dockerfile using a parser that understands various aspects of Dockerfiles, including heredocs, shell forms, Windows paths, and PowerShell.

Version updated for https://github.com/invigil/invigil to version v1.7.0. This action is used across all versions by 2 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Invigil is a CI quality gate that grades open-source projects against a product-quality doctrine by checking if the project boots, reads, and fixes errors in ten minutes. It ensures legibility, error hygiene, and supply-chain security through various gates and tools like linters, dependabot, and OpenSSF Scorecard.

Version updated for https://github.com/its-me/action.zizmor to version v1.0.1. This action is used across all versions by 32 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action runs the zizmor static analysis tool on GitHub Actions workflows. It automates finding security issues in workflows, providing inline annotations and SARIF files when code scanning is enabled, or simply streaming findings to the job log otherwise. The action uses a Docker image based on its own checked-out files, ensuring consistent behavior across different repositories calling it.

Version updated for https://github.com/jamesdfinance-dev/lazaretto-scan-action to version v1.1.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary The Lazaretto Scan GitHub Action automatically checks npm packages, repositories, skills, or files for malicious behavior by sending them to the Lazaretto API. It fails the build if any target is marked as “malicious” or “flagged,” providing a clear verdict in a sticky comment on pull requests. The action supports scanning specific targets or using the package.json file by default, and it integrates with GitHub Actions for CI/CD integration.

Version updated for https://github.com/JeongJaeSoon/agent-guard to version v3.0.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Agent Guard is an AI coding agent guardrail that blocks common secret leaks before they happen, protecting sensitive information like .env files and credentials from accidental exposure. It uses gitleaks for detection and shell scripts for integration, with support for Claude Code, Codex, Git hooks, CLI usage, and more.

Version updated for https://github.com/jonathandung/check-empty to version 0.1.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action checks if specified files are empty and clears them if they are. It automates the process of ensuring that certain files remain empty, which can be useful for maintaining consistency across projects or environments. The action is also available as a CLI tool and library, allowing for flexibility in how it is used within different development workflows.

Version updated for https://github.com/landsafe-dev/action to version v1.1.1. This action is used across all versions by ? repositories. Action Type This is a Node action using Node version 24. Go to the GitHub Marketplace to find the latest changes. Action Summary The Landsafe GitHub Action checks PostgreSQL migration PRs for potential issues that could cause downtime on production, such as blocking index builds or full table rewrites. It analyzes the .sql files in the PR diff and provides warnings about critical risks before merging the changes. The action does not connect to the database and is designed to be used alongside schema-as-code tools.

Version updated for https://github.com/mehvetero/move-test-gen to version v1.1.2. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary The move-test-gen GitHub Action generates edge-case test suites for Sui Move functions, covering various scenarios such as boundary values, arithmetic edges, access control, state machine, and economic issues. It uses the skills CLI to install and integrates into Claude Code environments, allowing users to generate tests by inputting function sources or audit findings. The coverage checker verifies that all asserts have corresponding expected failures and catches injected bugs using mutation testing.

Version updated for https://github.com/Mipiti/mipiti-verify to version v0.47.0. This action is used across all versions by ? repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action, mipiti-verify, automates the verification of threat model assertions for Mipiti tools. It can verify assertions against OpenAI or Anthropic models or check them locally using Tier 1 controls. It supports multiple commands including running all models, verifying a single assertion, checking assertions from a JSON file, listing pending assertions, reporting results, and auditing signed reports. The audit envelope contract ensures the integrity and authenticity of the verification results by leveraging public cryptographic chains and signatures.

Version updated for https://github.com/mmnto-ai/totem to version @mmnto/pack-rust-architecture@1.101.2. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Totem is a file-based toolkit that provides a zero-LLM linter and a queryable knowledge index derived from plain markdown lessons. It ensures project lessons, rules, and context survive across sessions by keeping them in the repository alongside the code. The tool is designed to prevent architectural mistakes by enforcing best practices with deterministic linting rules and a local, offline knowledge index.