Version updated for https://github.com/lateos-ai/npm-scan to version v1.5.1. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Purpose and Functionality: npm-scan is an advanced tool designed to detect a wide range of supply chain attacks, including eBPF kernel rootkits, memory extraction, credential theft, GitHub spoofing, AI-targeted attacks, and more. It complements traditional tools like npm audit and Snyk by offering behavioral detection that can identify hidden threats.

Version updated for https://github.com/lingodotdev/lingo.dev to version lingo.dev@0.138.1. This action is used across all versions by 104 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary The GitHub Action “Lingo.dev” automates the localization process by connecting to Lingo.dev’s translation platform. It enables continuous localization in GitHub Actions, reducing terminology errors and providing a structured approach to i18n setup, especially for React applications. The action supports various file formats like JSON, YAML, Markdown, CSV, and PO files, and it integrates with Lingo.dev’s API for seamless integration into development workflows.

Version updated for https://github.com/luau-project/setup-lua to version v2.0.0. This action is used across all versions by 1 repositories. Action Type This is a Node action using Node version 24. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action installs Lua (or LuaJIT or OpenResty) and LuaRocks in a single step within the .lua folder, supporting various versions and configurations. It automates the setup process across different operating systems and toolchains, including MSVC on Windows. The action allows for customization of Lua and LuaRocks versions through inputs, providing options to skip LuaRocks installation or specify specific commit hashes for LuaJIT and OpenResty.

Version updated for https://github.com/NASA-IMPACT/csda-version to version v0.4.3. This action is used across all versions by 1 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action calculates and updates the CSDA version for the checked-out repository. It automates the process of determining the next version based on predefined rules and is particularly useful when integrating with tools like release-please to handle automated releases. The action ensures that the versioning follows a specific format (vYY.PI.SP-X) and can be customized by setting release-as and config-file in the with block of the Github Action YAML file.

Version updated for https://github.com/Ndevu12/strix to version v0.1.4. This action is used across all versions by 1 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action, Strix, automates the detection of self-propagating worm indicators in checked-out repositories by running a Python package called stayawakebot. It scans the repository and reports on any suspicious or infected targets, failing CI when necessary. The action is configured with various inputs for customization such as specifying a specific version of stayawakebot, including a configuration file, setting failure conditions, and controlling how findings are reported (e.g., through SARIF files, artifacts, or comments).

Version updated for https://github.com/nicholas-fedor/go-proxy-pull-action to version v1.1.26. This action is used across all versions by 10 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action automatically updates a specified proxy cache whenever new releases are tagged in your Go module repository. It supports both standard and submodule version tags and allows customization of the proxy configuration, import path, and Go version. The action ensures that your module is immediately available on platforms like pkg.go.dev, making it simple to integrate into continuous integration workflows.

Version updated for https://github.com/open-delivery-spec/validate-action to version v0.2.3. This action is used across all versions by 6 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary The ODS Validate Action automates the AI code quality gate by attributing AI-generated code using Co-Authored-By trailers, analyzing code quality, scoring technical debt, and enforcing policy through OPA Rego. It runs on every pull request to prevent low-quality AI code from reaching production.

Version updated for https://github.com/pattonwebz/minisign-release-signer to version v1.0.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action automates the signing of release artifacts (like WordPress plugins and themes) with Minisign, a digital signature tool that uses Ed25519 keys. The action creates detached signatures, verifies them against a published public key, and logs each signature in Sigstore Rekor for transparency. It supports multiple files per release and provides replay protection by embedding trusted comments in the signatures. The action is designed to work seamlessly with WordPress workflows but can be used for any distributable artifact.

Version updated for https://github.com/practicalli/megalinter-custom-flavor-zensical to version Error loading version from page [https://github.com/marketplace/actions/megalinter-custom-flavor-practicallizensical], unable to determine latest release. This action is used across all versions by 2 repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. Action Summary This custom MegaLinter aims to reduce the Docker image size by removing unused linters and dependencies. It focuses on providing a lightweight and optimized version of the official MegaLinter images, suitable for use in GitHub Actions workflows and Docker environments. The action automatically keeps up to date with MegaLinter releases through scheduled builds and can be configured to publish to both GitHub Container Registry (ghcr.io) and Docker Hub.

Version updated for https://github.com/ramen-ai-dev/ramen-ai-action to version v1.0.1. This action is used across all versions by ? repositories. Action Type This is a Node action using Node version 22. Go to the GitHub Marketplace to find the latest changes. Action Summary The GitHub Action “ramen-ai PR Compliance Interceptor” is designed to block unsafe AI outputs before execution in pull requests. It scans pull request diffs, evaluates added text against the ramen-ai L2 Semantic Firewall, and fails the CI build on a [BLOCKED] verdict, posting a cryptographically-receipted comment on the PR.