Version updated for https://github.com/nerdalytics/check-action-versions to version v1.0.3. This action is used across all versions by 3 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary The “Check Action Versions” GitHub Action automates the process of auditing and updating actions referenced in workflow files to ensure they use the latest strict-semver releases. It scans workflows, identifies outdated actions, and creates a tracking issue and pull request to update uses: references with the latest commit SHAs, ensuring compliance with SHA-pinning requirements. This action simplifies maintaining up-to-date dependencies and enhances workflow security and reliability.

Version updated for https://github.com/octoberswimmer/aer-dist to version v0.0.159. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary The aer GitHub Action provides a lightweight, Salesforce-compatible runtime to validate and test Apex code directly in CI/CD pipelines without deploying to a Salesforce org. It simplifies and accelerates development workflows by enabling fast, reproducible test execution and debugging for Apex code. Key capabilities include running Apex tests, executing specific code paths, and interactive debugging within tools like VS Code or IntelliJ.

Version updated for https://github.com/OpenRailAssociation/web-deployment-action to version v1.2.2. This action is used across all versions by 5 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary The “Website Preview and Deployment Action” automates the deployment of a website artifact to both production and preview environments via SSH. It supports optional link checking, manages preview deployments for pull requests, and provides features like sticky PR comments and step summaries on GitHub. This action simplifies website deployment workflows by enabling seamless artifact delivery and environment-specific deployments.

Version updated for https://github.com/relizaio/rearm-docker-action to version 1.10.1. This action is used across all versions by 6 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary The rearm-docker-action GitHub Action automates the process of building a Docker image, pushing it to a specified registry, and submitting release metadata to the ReARM platform. It streamlines tasks related to containerized application delivery, supporting features like multi-platform builds, SBOM generation, and integration with security tools such as CodeQL and SecureSBOM. This action is ideal for organizations aiming to enhance their CI/CD workflows with automated image management and metadata tracking.

Version updated for https://github.com/rsclarke/setup-cosign to version v1.0.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary The Setup cosign Action automates the installation of the cosign binary (a tool for container image signing and verification) into GitHub Actions runners, ensuring the binary is secure through rigorous verification checks. It simplifies workflows by handling version resolution, caching for faster subsequent runs, and securely validating the integrity of the downloaded software, reducing setup time and ensuring reliability in CI/CD pipelines.

Version updated for https://github.com/rsclarke/setup-tenv to version v2.0.0. This action is used across all versions by 6 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary The Setup tenv GitHub Action automates the installation of the tenv tool and a specified infrastructure tool (e.g., Terraform or OpenTofu) at a specific version, ensuring version management and consistency across workflows. It includes caching to optimize performance and leverages signature verification to ensure the authenticity of downloaded binaries, streamlining secure and efficient tool setup in CI/CD pipelines.

Version updated for https://github.com/sandipndev/pool-lock to version 0.0.2. This action is used across all versions by ? repositories. Action Type This is a Node action using Node version 20. Go to the GitHub Marketplace to find the latest changes. Action Summary The pool-lock GitHub Action facilitates cross-run concurrent resource locking by interoperating with the Concourse Pool resource via a Git-based system. It automates the process of claiming and releasing shared resources (e.g., environments, machines) across CI/CD workflows, ensuring efficient resource management and preventing conflicts. This action is particularly useful for teams needing synchronized access to limited resources in distributed build or deployment pipelines.

Version updated for https://github.com/secureopsfr/actions-scan to version v2. This action is used across all versions by ? repositories. Action Type This is a Node action using Node version 20. Go to the GitHub Marketplace to find the latest changes. Action Summary The SecureOps GitHub Action automates security scanning for web applications directly within CI/CD pipelines. It identifies critical vulnerabilities, calculates a security score, and enforces a minimum score threshold to ensure compliance with security standards. The action integrates seamlessly with GitHub Actions, providing asynchronous scanning, real-time status updates, and automated failure handling based on scan results.

Version updated for https://github.com/Setono/sylius-plugin to version 2.1.1. This action is used across all versions by 1 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary The Sylius Plugin GitHub Action is a suite of CI/CD tools designed to streamline the development and maintenance of Sylius plugins. It automates key tasks such as static code analysis, dependency management, testing (unit, integration, and mutation), code coverage, and backward compatibility checks. By providing pre-configured, modular actions aligned with Sylius development standards, it reduces the overhead of setting up and maintaining individual CI pipelines for plugin authors.

Version updated for https://github.com/slatinwine/newma-review-action to version v0.2.0. This action is used across all versions by ? repositories. Action Type This is a Node action using Node version 20. Go to the GitHub Marketplace to find the latest changes. Action Summary The Newma Review Action is a GitHub Action that automates AI-powered code reviews and security audits for repositories. It provides two modes: a “diff mode” for reviewing pull request changes and a “full mode” for conducting repository-wide security scans. By identifying critical security vulnerabilities such as URL/path injection, secret leakage, and default fail-open issues, it helps developers streamline code review processes and enhance code security.