Version updated for https://github.com/ocku/chainsec to version 0.6.0. This action is used across all versions by ? repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. Action Summary chainsec is a dependency chain supply auditing tool that scans Python, JavaScript, and TypeScript projects for malicious code, bad practices, and security vulnerabilities. It uses Tree-sitter to parse source files statically and runs versioned queries against them to detect suspicious constructs like dynamic execution and network access. The tool is safe by default and does not install or execute package code, making it suitable for use as a CI component with documented exit codes.

Version updated for https://github.com/ocku/chainsec to version 0.5.2. This action is used across all versions by ? repositories. Action Type This is a Docker action. Go to the GitHub Marketplace to find the latest changes. Action Summary chainsec is a tool for auditing dependency chains in Python, JavaScript, and TypeScript projects. It discovers dependencies, enriches them with lockfile information, securely acquires verified artifacts, scans sources with versioned Tree-sitter rules, and generates JSON, SARIF, or terminal reports. It can be used as a CI component and offers safe defaults by default, without launching executables or executing package code.