Version updated for https://github.com/homeofe/supply-chain-guard to version v5.25.8. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary The supply-chain-guard GitHub Action is an open-source tool that performs a comprehensive supply-chain security scan for various ecosystems including npm, PyPI, Cargo, Go, RubyGems, Composer, NuGet, Docker, Terraform, VS Code extensions, and GitHub repositories. It detects malware campaigns such as GlassWorm, Vidar/GhostSocks, and Shai-Hulud, as well as fake AI tool repos and account takeovers. The action generates CycloneDX SBOMs with real dependency inventories and SLSA provenance for each scan result.