Version updated for https://github.com/formalness/shipready to version v1.5.1. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Summary: shipready is a CLI tool designed to help developers identify and fix common issues in AI-generated code projects. It scans the project for hardcoded secrets, missing .env.example files, debug logs, unfinished TODOs, and broken repo hygiene. The tool provides an automated way to check and optionally fix these issues before releasing the application. shipready is particularly useful for AI coding tools, as it detects common pitfalls that can be harmful to security and maintainability once deployed.

Version updated for https://github.com/hashgraph-online/ai-plugin-scanner-action to version v1.2.464. This action is used across all versions by 18 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action automates the scanning of AI plugin repositories across Codex, Claude, Gemini, and OpenCode ecosystems. It identifies security, publishability, runtime readiness, and trust signals in plugins, emitting structured reports, SARIF files, policy results, and submission metadata. The action is compatible with GitHub Marketplace workflows and supports different execution modes, formats, and reporting options.

Version updated for https://github.com/hashgraph-online/hol-codex-plugin-scanner-action to version v1.2.464. This action is used across all versions by 11 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action automates the security, publishability, runtime readiness, and trust signals of AI plugin repositories across Codex, Claude, Gemini, and OpenCode ecosystems. It emits structured reports, SARIF, policy results, and submission metadata while staying aligned with the main scanner release train. The action is designed to handle both local repository content and live network probing for verify mode, providing flexibility for different integration needs.

Version updated for https://github.com/homeofe/supply-chain-guard to version v5.12.2. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary supply-chain-guard is an open-source supply-chain security scanner that detects malware campaigns, fake AI tool repos, and other threats across various ecosystems like npm, PyPI, Cargo, Go, RubyGems, Composer, NuGet, Docker, Terraform, VS Code extensions, GitHub Actions, and repositories. It generates CycloneDX SBOMs with real dependency inventories, verifies SLSA provenance, and correlates findings into attack-chain incidents.

Version updated for https://github.com/iolairus/borderlint to version v1.9.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Summary: borderlint is a static linter designed to scan AI data and model traffic within a repository, evaluating it against residency, sovereignty, and provenance dimensions. It supports multiple programming languages (Python, TypeScript/JavaScript, Java/Kotlin) and can generate reports in various formats such as JSON, SARIF, SBOM, evidence packs, and HTML. The action automatically checks for compliance with predefined policies and provides detailed audit reports to ensure data and model traffic adhere to specified regulations.

Version updated for https://github.com/ItzEmoji/aeroflare to version v1.8.0. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary The GitHub Action automates the caching and pushing of Nix build outputs to an OCI registry from CI. It uses the aeroflare tool to generate OCI images with store paths as tags, enabling fast lookups in container registries. This action streamlines the process for developers by handling cache management and OCI image creation automatically.

Version updated for https://github.com/JeongJaeSoon/agent-guard to version v1.10.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Summary: Agent Guard is a deterministic guardrail that blocks AI coding agents from accidentally exposing secrets during tool calls. It uses gitleaks for detection and plain shell scripts for integration. It runs at the agent’s tool boundary to block common secret exposure methods, such as reading .env files or writing sensitive values. Agent Guard pairs with commit/CI scanning for defense in depth. It is not a vault or credential rotator but provides real-time protection before secrets are exposed.

Version updated for https://github.com/LennardZuendorf/pytest-bench-action to version v1.0.2. This action is used across all versions by 1 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action automates performance benchmarking using pytest-benchmark. It compares test results against per-branch baselines, allowing developers to track and report changes in performance over time. Key features include automatic baseline management, tolerance-based threshold checking, and the ability to override regressions for specific PRs. The action is particularly useful for maintaining consistent performance metrics across different environments and detecting unexpected performance regressions.

Version updated for https://github.com/pradeepmouli/dependabit to version @dependabit/utils@0.1.17. This action is used across all versions by 0 repositories. Action Type This is a Node action using Node version 20. Go to the GitHub Marketplace to find the latest changes. Action Summary Dependabit is an AI-powered dependency tracking action that automatically discovers, tracks, and monitors external dependencies referenced in a codebase. It uses LLMs to intelligently detect dependencies like GitHub repos, documentation sites, API references, research papers, and more. Dependabit provides features for automatic updates, change monitoring, and flexible configuration, making it a powerful tool for managing software dependencies effectively.

Version updated for https://github.com/r12habh/ActionScope to version v0.4.0. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary ActionScope is a GitHub Action that scans your CI/CD workflows to identify and report potential security risks in AWS permissions. It provides plain-English explanations of what your workflows can do if compromised, including actions like role escalation, privilege escalation, and data exfiltration. The action also detects known-compromised actions, OIDC trust policy misconfigurations, script injection, artifact poisoning, AI agent prompt injection surfaces, unpinned actions with SHA resolution, local recursion in reusable workflows, and correlated exposure paths.