Version updated for https://github.com/mrjackyliang/sponsor-gated-support to version v2.0.2. This action is used across all versions by 20 repositories. Action Type This is a Node action using Node version 24. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action automates the process of gating support issues based on sponsorship status. It automatically replies, closes, and locks issues for non-sponsors, while providing a welcome message to sponsors who meet eligibility criteria set by sponsorship amount and activity. The action uses live GitHub Sponsors data to determine sponsorship status and supports multiple labels for gating support issues.

Version updated for https://github.com/ntoledo319/pci-payment-page-check to version v1.1.1. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action checks the third-party scripts loaded on a payment page to ensure they are authorized and meet PCI DSS requirements. It fails the build if an unauthorized script is detected, helping prevent security issues related to payment processing. The action supports different scopes (direct, embedded, or outsourced) depending on how scripts are integrated into the payment page.

Version updated for https://github.com/pfrederiksen/mcpsec to version v1.1.1. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Summary: MCPSec is an OWASP MCP Top 10 security scanner designed to audit Model Context Protocol (MCP) server configurations. It checks for security risks, outputs findings in OCSF JSON or human-readable tables, and supports a pluggable YAML rules engine for community-contributed detections. The action can be used for developer laptop audits, CI/CD gate controls, security team posture assessments, Claude Desktop Extension reviews, and compliance evidence generation.

Version updated for https://github.com/provael/provael to version v0.36.2. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary The Provael action automates the red-teaming of Vision-Language-Action (VLA) robot policies in simulation to measure their Attack Success Rate (ASR) by analyzing various attack techniques. It solves the problem of systematically testing VLA policies and generating comprehensive reports, including ASR statistics, pass/fail scores, and SARIF tags for rule evaluation. The action provides deterministic execution across tasks with reproducible results, making it a valuable tool for policy validation in simulation environments.

Version updated for https://github.com/qazbnm456/diff-sentry to version v0.4.2. This action is used across all versions by 1 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary diff-sentry is a GitHub Action designed to detect malicious pull requests by analyzing changes as untrusted data and identifying specific attack patterns such as obfuscation, execution, exfiltration, and provenance. It helps catch workflows that could potentially break the build or lead to security vulnerabilities before they are merged.

Version updated for https://github.com/RivieraKid/gha-kaniko to version v1. This action is used across all versions by ? repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action, “Hello world docker action,” prints a greeting message either to “World” or a specified name. It is designed to automate the process of displaying personalized greetings in logs, solving the problem of automating simple text output. The key capabilities include inputting a name for the person to greet and retrieving the current time when the message is displayed.

Version updated for https://github.com/rumankazi/fettle to version v4.3.0. This action is used across all versions by 0 repositories. Action Type This is a Node action using Node version 24. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action automates the maintenance health assessment of GitHub repositories by evaluating five key rules: branch protection, code ownership, dependency updates configuration, open pull request count, and stale pull requests. It provides a real five-rule score, letter grade, and detailed evidence for each result, helping users understand their repository’s maintenance health status.

Version updated for https://github.com/santi020k/eslint-config-basic to version @santi020k/eslint-config-full@3.2.0. This action is used across all versions by 4 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action automates the setup of a DX-first ESLint configuration that detects and automatically configures JavaScript, TypeScript, and optional framework features based on the project’s dependencies. The action allows users to manage their linting configuration efficiently, including installing only the necessary packages and features tailored to their project needs.

Version updated for https://github.com/sattyamjjain/agent-audit-kit to version v0.3.85. This action is used across all versions by ? repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. Action Summary AgentAuditKit automates security scans for AI agent pipelines across 10 platforms, identifying misconfigurations, hardcoded secrets, tool poisoning, and tainted data flows. It ensures that your code, configs, and secrets remain secure by scanning locally without network calls and maintaining consistent results.

Version updated for https://github.com/seaofvoices/release-luau-package-action to version v1.0.1. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary The Release Luau Package Action automates the process of publishing and releasing Sea of Voices Luau packages to npm, creating a new tag, and uploading assets to a GitHub release. It requires permissions to create tags, releases, and publish to npm with provenance. Users can specify artifacts for upload and choose between using yarn or npm as their package manager.