August 21, 2026
Nx Affected Projects
Version updated for https://github.com/mayurrawte/github-nx-affected to version v1.0.0.
This action is used across all versions by ? repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
Action Summary This GitHub Action automates smart deploys for Nx monorepos by using the nx affected command to identify changed projects. It outputs a matrix-ready JSON array of affected apps, allowing users to fan out CI jobs on what actually changed. The action handles base and head SHAs automatically and provides optional features such as auto-deepening history and versioning Node.js and package managers.
August 21, 2026
Apex Code Coverage Transformer
Version updated for https://github.com/mcarvin8/apex-code-coverage-transformer to version v3.1.3.
This action is used across all versions by ? repositories. Action Type This is a Node action using Node version 24.
Go to the GitHub Marketplace to find the latest changes.
Action Summary The apex-code-coverage-transformer action automates the transformation of Apex code coverage JSON files from Salesforce deployments or test runs into various formats used by popular CI/CD tools, such as SonarQube, Codecov, GitHub, GitLab, Azure DevOps, and Bitbucket. It streamlines the process of integrating Salesforce coverage data into existing workflows without requiring the installation of the Salesforce CLI.
August 21, 2026
mockdr — Multi-EDR Mock Server
Version updated for https://github.com/mockdr/mockdr to version v2.0.3.
This action is used across all versions by ? repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
Action Summary The mockdr GitHub Action is a self-contained multi-EDR mock server designed to simulate responses from SentinelOne, CrowdStrike Falcon, Microsoft Defender for Endpoint, Elastic Security, Cortex XDR, Splunk SIEM, and Microsoft Sentinel APIs. It provides realistic seed data, real API paths, and response envelopes for testing security platforms without the need for real APIs or lab licenses. The action supports SOAR playbooks, SIEM connectors, and automation scripts to point at mockdr without modification, ensuring consistent and deterministic data across all vendors.
August 21, 2026
Overruled Verdict Auditor
Version updated for https://github.com/MohibShaikh/overruled-action to version v0.1.2.
This action is used across all versions by ? repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
Action Summary This GitHub Action automates the auditing process of AI SOC agents using the overruled tool, which checks if an agent is overruled on ground-truth cases. It fails the workflow if the subject agent gets overruled and provides a JUnit XML report for further analysis. The action allows users to specify the investigation URL, token, number of runs, output format, and output file path.
August 21, 2026
PCI Payment Page Script Check
Version updated for https://github.com/ntoledo319/pci-payment-page-check to version v1.1.2.
This action is used across all versions by ? repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
Action Summary This GitHub Action checks the third-party scripts on a payment page to ensure they are authorized according to PCI DSS v4.0.1 requirements 6.4.3 and 11.6.1. It fails the build if any unauthorized script is detected, helping prevent security risks associated with unreviewed third-party integrations.
August 21, 2026
ExploitSpec security regression tests
Version updated for https://github.com/pazent/exploitspec to version v0.2.0.
This action is used across all versions by 0 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
Action Summary ExploitSpec is a tool that automates regression testing for security vulnerabilities by converting HTTP exploits into small, reviewable tests. It ensures the same vulnerability does not return by verifying that an invariant fails on a vulnerable baseline, passes after a fix, and remains stable across repeated runs. The tool uses YAML-based specs and provides a local-first approach to testing without requiring accounts or hosted services.
August 21, 2026
SkillTotal AI Component Security Scan
Version updated for https://github.com/pezhik/skilltotal to version v0.42.0.
This action is used across all versions by ? repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
Action Summary SkillTotal is an open-source CLI tool that analyzes AI-related components, including agent skills/plugins, MCP servers, npm packages, Python packages, repositories, and AI-generated projects. It statically scans these components to identify security risks, dangerous capabilities, prompt-injection surfaces, and data-exfiltration paths before installation or trust. SkillTotal avoids running components on the user’s machine and provides deterministic, evidence-anchored reports that are free of false positives.
August 21, 2026
promptry eval
Version updated for https://github.com/promptry/promptry to version v1.1.0.
This action is used across all versions by 0 repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
Action Summary The GitHub Action described in the README automates the creation of documentation content for a repository using templates provided by a specified template provider. It solves the problem of repetitive documentation tasks by generating documentation based on predefined templates, reducing the risk of errors and saving development time. The key capabilities include:
August 21, 2026
Provael VLA red-team
Version updated for https://github.com/provael/provael to version v0.37.0.
This action is used across all versions by ? repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
Action Summary Provaelâ„¢ automates the red-teaming of Vision-Language-Action (VLA) robot policies through simulation. It evaluates policy success by running a series of attacks and measuring Attack Success Rate (ASR), providing an ASR-by-attack table, a pass/fail scorecard, and a SARIF report. The action is particularly useful for testing the robustness of VLA policies in various scenarios.
August 21, 2026
Debian Multi-Architecture Package Builder
Version updated for https://github.com/ranjithrajv/debian-multiarch-builder to version v.0.1a23.
This action is used across all versions by ? repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
Action Summary This GitHub Action simplifies the process of building Debian packages across multiple architectures from upstream releases. It supports auto-discovery and interactive setup wizards, reducing manual configuration overhead. The action provides built-in Lintian integration for quality assurance and secure checksum verification for all downloads. With 12+ pre-built templates for popular projects, it offers quick and reliable package builds for various programming languages and environments.