Version updated for https://github.com/Vigilant-LLC/runner-guard to version v3.1.5. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Runner Guard is a CI/CD supply chain security scanner designed to detect and mitigate vulnerabilities in GitHub Actions workflows. It automates the detection of pipeline injection attacks, unpinned dependencies, AI configuration poisoning, and supply chain threats, while also scanning dependency pipelines for security issues. Key features include vulnerability reporting, auto-fixing issues, continuous monitoring of dependencies, and generating security scores to enhance workflow integrity.

Version updated for https://github.com/Vigilant-LLC/runner-guard to version v3.1.4. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Runner Guard is a CI/CD security scanner for GitHub Actions workflows that detects vulnerabilities such as pipeline injection, unpinned dependencies, and compromised packages. It automates the identification and resolution of supply chain risks by scanning repositories, auditing upstream dependencies, and providing actionable outputs like auto-fixes, reports, and alerts. This tool helps ensure secure workflows by continuously monitoring dependencies and offering organization-wide scanning capabilities.

Version updated for https://github.com/Vigilant-LLC/runner-guard to version v3.1.3. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Runner Guard is a CI/CD supply chain security scanner for GitHub Actions that identifies vulnerabilities such as pipeline injection, unpinned dependencies, AI configuration poisoning, and steganographic payloads in workflows. It automates tasks like detecting compromised package versions, auditing upstream dependency pipelines, and enforcing security best practices with features like auto-fixing issues, parallel multi-repo scanning, and integration with alerting systems. The action provides comprehensive reporting and continuous monitoring, enabling teams to enhance the security of their GitHub Actions workflows and dependencies.

Version updated for https://github.com/Vigilant-LLC/runner-guard to version v3.1.2. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Runner Guard is a CI/CD supply chain security scanner designed for GitHub Actions workflows. It automates the detection and mitigation of vulnerabilities such as pipeline injection, unpinned dependencies, compromised packages, and AI configuration poisoning, while offering features like dependency auditing, multi-repo scanning, and continuous monitoring. Its key capabilities include generating vulnerability reports, auto-fixing issues, enforcing CI security gates, and providing real-time alerts to improve the security posture of your workflows and dependencies.

Version updated for https://github.com/Vigilant-LLC/runner-guard to version v3.0.2. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Runner Guard is a CI/CD security scanner for GitHub Actions workflows that detects vulnerabilities such as pipeline injection, unpinned dependencies, compromised packages, and supply chain threats. It automates the identification, auditing, and remediation of issues across workflows and dependencies, offering capabilities like multi-repo parallel scanning, upstream pipeline audits, and continuous monitoring. This tool enhances software supply chain security by providing actionable insights, automatic fixes, and integration with alerting systems like Slack and PagerDuty.

Version updated for https://github.com/Vigilant-LLC/runner-guard to version v3.0.1. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Runner Guard is a CI/CD supply chain security scanner designed for GitHub Actions workflows. It automates the detection and remediation of vulnerabilities such as pipeline injection, unpinned dependencies, AI configuration poisoning, and supply chain attacks, while also auditing upstream dependencies for security. Key capabilities include multi-repo parallel scanning, compromised package detection, auto-fixes, and integration with alerting systems for continuous monitoring.

Version updated for https://github.com/Vigilant-LLC/runner-guard to version v2.9.0. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Runner Guard is a CI/CD supply chain security scanner designed for GitHub Actions workflows. It automates the detection and remediation of vulnerabilities such as pipeline injection, unpinned dependencies, AI configuration poisoning, and compromised packages, providing a comprehensive security score and auto-fix capabilities. This tool streamlines multi-repo scanning, identifies threats in dependency build pipelines, and enhances workflow security through actionable insights and automated fixes.

Version updated for https://github.com/Vigilant-LLC/runner-guard to version v2.8.0. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Runner Guard is a CI/CD security scanner for GitHub Actions that automates the detection and remediation of pipeline vulnerabilities, supply chain risks, and AI configuration attacks. It scans workflows, lock files, and repositories for issues like unpinned dependencies, injection exploits, and compromised packages, providing actionable reports and auto-fix capabilities. This tool streamlines security checks and enhances the integrity of software supply chains by enabling batch scanning, scoring, and continuous integration gating.

Version updated for https://github.com/Vigilant-LLC/runner-guard to version v2.6.0. This action is used across all versions by 0 repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Runner Guard is a CI/CD vulnerability scanner designed to analyze GitHub Actions workflows for security risks, including injection paths and hidden malicious payloads. It automates the detection of critical vulnerabilities such as misconfigured pull_request_target workflows that expose repository secrets and supply chain attacks involving invisible Unicode steganography. By performing static taint analysis and byte-level scanning, Runner Guard mitigates risks of AI-driven exploitation and enhances the security of software supply chains.