Version updated for https://github.com/TGPSKI/skeptic to version v0.4.0. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary skeptic is a local repository trust auditor designed to detect structural trust boundary vulnerabilities that enable cascading supply chain compromise. It targets attack-enabling conditions rather than artifacts, offering a comprehensive view of vulnerability surfaces in CI/CD pipelines and agentic tooling. The action automates the scanning process using a standardized rule set and provides mechanisms for ingesting threat intelligence and managing a threat artifact corpus.

Version updated for https://github.com/TGPSKI/skeptic to version v0.3.1. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary skeptic is a local repository trust auditor that detects structural vulnerabilities in the gaps between existing security tools, focusing on attack-enabling conditions rather than artifacts. It targets CI/CD trust boundary violations, agentic ecosystem poisoning, and “nobody reviews this” attack surfaces by scanning filesystems for specific patterns and behaviors.