Version updated for https://github.com/qazbnm456/diff-sentry to version v0.4.2. This action is used across all versions by 1 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary diff-sentry is a GitHub Action designed to detect malicious pull requests by analyzing changes as untrusted data and identifying specific attack patterns such as obfuscation, execution, exfiltration, and provenance. It helps catch workflows that could potentially break the build or lead to security vulnerabilities before they are merged.

Version updated for https://github.com/qazbnm456/diff-sentry to version v0.4.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary diff-sentry is a GitHub Action designed to scan pull requests against potential malicious or obfuscated code patterns using machine learning models. It checks for various attack vectors such as workflow configuration, obfuscation, execution techniques, and exfiltration, providing evidence-based alerts without relying on an API key or model. The action runs efficiently under read-only tokens and can be configured to skip certain paths and report only specific severities.