Assess the risk of third-party GitHub Actions

GitHub Action for enabling bazel build cache on NVIDIA-managed CI runners

GitHub action that adds a label once a PR has merge conflicts. Secure drop-in replacement for eps1lon/actions-label-merge-conflict.

jdx/mise-action is a GitHub Action that integrates the mise tool into your CI/CD workflows. Secure drop-in replacement for jdx/mise-action.

Omnigent is an open-source AI agent framework and meta-harness: orchestrate Claude Code, Codex, Cursor, Pi, and custom agents — swap harnesses without rewriting, enforce policies and sandboxing, and collaborate in real time from any device.

Official repository for the Microsoft C/C++ extension for VS Code.

Test repository created from policy-based-prs template for integration testing

UI Builder is an open-source blockchain development tool that helps developers and non-developers create user-friendly interfaces for smart contract interaction by providing a chain-agnostic form builder that generates standalone "mini apps" without requiring backend infrastructure.

Open-source AI code review engine + unified quality CLI orchestrating 15+ linters. CLI, GitHub Action, and MCP server.

Reusable GitHub Actions for Tempo

Test repository created from policy-based-prs template for integration testing

GitHub Action to use Docker Buildx Bake as a high-level build command

Reusable composite GitHub actions to support k6 extension development.

Set up your GitHub Actions workflow with a specific version of Bazelisk

Tool to merge pull requests generated by automation in GitHub

A GitHub action that facilitates "ChatOps" by creating repository dispatch events for slash commands. Secure drop-in replacement for peter-evans/slash-command-dispatch.

Agnostic package/library development/release CI/CD tool

A collection of reusable Github Actions workflows.

Standalone JIT-style runtime for WebAssembly, using Cranelift