Version updated for https://github.com/snowdreamtech/setup-unirtm to version v0.6.0. This action is used across all versions by 36 repositories. Action Type This is a Node action using Node version 24. Go to the GitHub Marketplace to find the latest changes. Action Summary The GitHub Action setup-unirtm automates the installation and configuration of UniRTM, a runtime and tools manager. It intelligently detects the best install method based on available runtimes and supports multiple methods such as npm, pip, GitHub Releases, and go installs. The action also offers features like caching using Handlebars templates and supports GitHub proxy configurations for restricted networks.

Version updated for https://github.com/SpiderCob/dlp-scan-action to version v1.0.1. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action uses dlp-patterns to scan a codebase for secrets, PII, and sensitive data. It helps detect over 50 categories of sensitive information and provides detailed reports on findings, including the number and severity levels. The action can be configured to focus only on API keys and credentials or to scan everything, including PII. Users can set thresholds for severities to trigger different actions in CI/CD pipelines.

Version updated for https://github.com/TypedDevs/bashunit to version 0.43.0. This action is used across all versions by 1 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary This action is a simple testing framework for Bash scripts that automates the process of writing and running tests. It focuses on providing developers with a lightweight, fast testing experience with over 70 assertions across various families, including equality, strings, exit codes, numeric checks, arrays, file/directory permissions, JSON assertions, date comparisons, duration checks, snapshots, and test doubles. The framework is designed to be user-friendly and developer-centric, offering interactive learning through the learn command and extensive documentation at bashunit.com.

Version updated for https://github.com/vaquarkhan/mcp-test-harness to version v3.0.9. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary The MCP Test Harness is a CI tool that automates and tests the correctness of MCP servers. It helps teams ensure their AI server features do not break silently and provides evidence of compliance with standards like JUnit, SARIF, and HTML reports. By using this action, developers can quickly verify the reliability and performance of their MCP servers before they are deployed, reducing costs associated with quality assurance and improving overall trust in their codebase.

Version updated for https://github.com/vinceAmstoutz/symfony-security-auditor to version 1.17.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action is an AI-powered security auditor for Symfony applications that automates the detection of application-level vulnerabilities missed by traditional SAST tools. It targets business logic flaws and multi-file attack chains, providing a comprehensive validation report in console, JSON, SARIF, HTML, or Markdown formats. The action uses adversarial “Attacker” and skeptical “Reviewer” agents to identify and cull false positives over three iterations, ensuring a validated report for security audits in Symfony projects.

Version updated for https://github.com/VladasZ/rustscript to version v0.2.10. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary RustScript is a tool that interprets and runs Rust scripts without compiling them fully. It allows users to execute Rust code directly from the command line, bypassing the need for Cargo or type checking. The action supports running scripts, validating them without execution, building native binaries, listing supported features, clearing caches, and updating releases.

Version updated for https://github.com/Wraith-security/Legion_runner to version v1.0.43. This action is used across all versions by 8 repositories. Action Type This is a Node action using Node version 24. Go to the GitHub Marketplace to find the latest changes. Action Summary Legion Runner is an open-source security tool that hardens GitHub Actions against supply chain attacks by monitoring outbound connections, blocking unauthorized destinations, and identifying processes behind them. It provides a comprehensive defense mechanism that runs on pure Node built-ins without dependencies and offers features like egress policy control, process attribution, and file integrity checks.

Version updated for https://github.com/yuvrajangadsingh/vibecheck to version v1.13.0. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary vibecheck is a tool that automates the detection of AI-generated code smells by using ESLint rules to identify common issues such as hardcoded secrets, empty catch blocks, and SQL injection vulnerabilities. It runs locally without requiring any external dependencies or configuration files. The main purpose of vibecheck is to help developers quickly identify potential problems in their AI-generated codebases, ensuring better security, maintainability, and performance.

Version updated for https://github.com/devr-tools/codeguard to version v1.2.1. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary codeguard is a comprehensive tool that automates various repository checks across code quality, design boundaries, security, CI/CD hygiene, AI prompt governance, and repo-specific policy rules. It supports extensive capabilities such as repository exclusions, baselines, waivers, changed-lines diff scans, SARIF output, GitHub annotations, custom rule packs, natural-language custom rules through an optional AI runtime, policy profiles, scan caching, doctor checks, rule discovery from the CLI, native TypeScript/Python quality, design, and security heuristics, and language-specific command checks.

Version updated for https://github.com/digicatapult/check-version to version v1.5.93. This action is used across all versions by 35 repositories. Action Type This is a Node action using Node version 24. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action compares the versions in package.json and package-lock.json with those of Cargo.toml and pyproject.toml, ensuring they are higher than the latest published tags for each manager. It also provides a way to set custom paths for these files and handle failed checks by setting a fail_on_same_version flag.