Assess the risk of third-party GitHub Actions

eBPF-based Networking, Security, and Observability

Detect npm packages compromised in the Shai-Hulud 2.0 supply chain attack (Nov 2025). Scans for 790+ malicious packages, suspicious scripts, TruffleHog activity, SHA1HULUD runners, and secrets exfiltration. GitHub Action with SARIF support.

eBPF-based autoinstrumentation of HTTP and HTTPS services

A modular, primitive-first, python-first PyTorch library for Reinforcement Learning.

Ensure your PR title matches the Conventional Commits spec. Secure drop-in replacement for aslafy-z/conventional-pr-title-action.

GitHub Action to import a GPG key

This Action will import ansible roles on galaxy-ng. Secure drop-in replacement for ansible-actions/ansible-galaxy-action.

A set of GitHub actions for checking your projects for vulnerabilities. Secure drop-in replacement for snyk/actions.

GitHub Actions for the R community

:octocat: Transform files in your repository with Handlebars templating!

Release automatically with this npm package version check by PostHog

Replacement mechanism for the Oracle CDC functionality currently operational on CWA and CIS.

Do you check in dependency packages or build artefacts? If yes this GitHub Action helps you ensure they are not out-of-sync.

Github action to enforce Pull Request title conventions

The front-end of OpenList, powered by SolidJS