Assess the risk of third-party GitHub Actions

Bicep registry modules

Sync Storage server in Rust

Non-intrusive GUI framework for Rust/WASM

Mono-repository for Ledger Wallet apps and related packages

NVIDIA RMM is a library for allocating and managing GPU memory in C++ and Python.

Retries a GitHub Action step on failure or timeout. Secure drop-in replacement for nick-fields/retry.

Collection of composite actions, callable workflows, and deployment scripts used for common Twilio deployment tasks. Secure drop-in replacement for zingdevlimited/actions-helpers.

Secure drop-in replacement for sonarsource/sonarqube-scan-action.

Production-grade Rust-native trading engine with deterministic event-driven architecture

A GitHub action you can use to scan with Endor Labs

GitHub Action to setup `ssh-agent` with a private key. Secure drop-in replacement for webfactory/ssh-agent.

A public-facing, centralized place to store reusable workflows used by Grafana Labs.

Cache dependencies and build outputs in GitHub Actions

A special version of the Github Actions Runner specifically to run OWASP security scans (bootstrapped 2025-08-18)

Repository for shared config files, actions and planning.

This GitHub Action runs Checkov against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues. Secure drop-in replacement for bridgecrewio/checkov-action.

Language-agnostic SLSA provenance generation for Github Actions