Version updated for https://github.com/zizmorcore/zizmor-action to version v0.5.1. This action is used across all versions by 1,701 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary The zizmor-action GitHub Action integrates the zizmor analysis tool into CI/CD workflows, enabling automated security and code quality analysis directly within GitHub repositories. It supports integration with GitHub Advanced Security for seamless stateful analysis and incremental triage, providing findings in the repository’s security tab.

Version updated for https://github.com/b-on-g/tauri-mol-workflow-template to version Error loading version from page [https://github.com/marketplace/actions/tauri-mol-build], unable to determine latest release. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary The Tauri + $mol Build GitHub Action automates the process of building cross-platform Tauri applications from $mol/MAM modules. It simplifies and streamlines tasks such as bundling web assets, generating Tauri icons, updating configuration files, and building for multiple platforms (e.

Version updated for https://github.com/DNSZLSK/muad-dib to version v2.5.16. This action is used across all versions by 1 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary MUAD’DIB is a supply chain security tool that detects and analyzes threats in npm and PyPI dependencies using static and dynamic analysis, deobfuscation, dataflow, and behavioral anomaly detection. It helps identify known malicious packages, suspicious patterns, and potential vulnerabilities, providing risk scores and actionable insights for remediation.

Version updated for https://github.com/duriantaco/skylos to version v3.5.6. This action is used across all versions by 11 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Skylos is a hybrid static analysis tool designed for Python, TypeScript, and Go that automates the detection of dead code, security vulnerabilities, and code quality issues with high precision. It leverages advanced techniques, including AST analysis and optional AI-powered engines, to eliminate false positives, uncover deep logic bugs, and enhance security scanning.

Version updated for https://github.com/JNZader/ghagga to version v2.3.0. This action is used across all versions by 0 repositories. Action Type This is a Node action using Node version 20. Go to the GitHub Marketplace to find the latest changes. Action Summary GHAGGA is an AI-powered code review tool designed to automate and enhance the process of reviewing pull requests. It combines static analysis tools (Semgrep, Trivy, CPD) with large language models (LLMs) and a project memory system to identify issues, suggest improvements, and provide structured feedback.

Version updated for https://github.com/lu-zhengda/pr406 to version v0.1.1. This action is used across all versions by ? repositories. Action Type This is a Node action using Node version 20. Go to the GitHub Marketplace to find the latest changes. Action Summary The pr406 GitHub Action automatically evaluates pull requests using predefined heuristic rules to assign a score, identifying potentially low-quality or automated submissions. It automates the process of flagging PRs that exceed a configurable threshold and provides a standardized response, helping maintainers efficiently manage contributions and ensure code quality.

Version updated for https://github.com/luckyPipewrench/pipelock to version v1.0.0. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Pipelock is an open-source agent firewall designed to protect AI agents by monitoring and blocking unauthorized or malicious HTTP requests, such as those attempting to leak sensitive data like API keys. It automates security for AI agents by intercepting their network traffic and scanning it for vulnerabilities or data leaks, operating as a single binary without runtime dependencies.

Version updated for https://github.com/mgazza/kustomize-roots to version v1.1.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary The kustomize-roots GitHub Action identifies root kustomization.yaml files in a directory tree—those not referenced by other kustomizations—and optionally builds or validates them. It automates tasks like determining root kustomizations, rendering their outputs, and generating diffs of manifests for CI/CD workflows.

Version updated for https://github.com/msaad00/agent-bom to version v0.60.2. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Agent-bom is a security scanning tool designed specifically for AI infrastructure. It automates the detection of vulnerabilities (CVEs), credential exposure, and potential attack paths across AI agents, containers, Kubernetes clusters, cloud environments, and GPU workloads.