Assess the risk of third-party GitHub Actions

Mirror from https://github.com/docker/setup-buildx-action

Docker-based GitHub Action for running actionlint with SHA-pinned images and Dependabot-managed updates.

Github action to do sanity check around org name and group id

OPG shared GitHub composite actions for workflows.: Managed by opg-org-infra & Terraform

Primary source of truth for the Broadsage Container Images

GitHub Action - Yaml Lint. Secure drop-in replacement for ibiqlik/action-yamllint.

CI/CD integration

All-in-one Kubernetes SDK: create, manage, and operate clusters across distributions (Kind, K3d, Talos, VCluster) with built-in GitOps, secrets, AI assistant, and MCP server. Only requires Docker or a Cloud Provider.

Terraform enables you to safely and predictably create, change, and improve infrastructure. It is a source-available tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.

OpenZeppelin Contracts is a library for secure smart contract development.

This action is designed for projects using Moonrepo, making the test results of the moon ci command more readable in GitHub Actions logs. Secure drop-in replacement for appthrust/moon-ci-retrospect.

Home of the Renovate CLI: Cross-platform Dependency Automation by Mend.io

The leading data integration platform for ETL / ELT data pipelines from APIs, databases & files to data warehouses, data lakes & data lakehouses. Both self-hosted and Cloud-hosted.

A library for exporting models including NeMo and Hugging Face to optimized inference backends, and deploying them for efficient querying

The CUDA target for Numba

gha-setup-yq is a GitHub action to install the yq command line YAML parser. Secure drop-in replacement for vegardit/gha-setup-yq.

Github Action to create a git tag + release when pushed to master. Secure drop-in replacement for rymndhng/release-on-push-action.