Assess the risk of third-party GitHub Actions

Reproduce bug https://github.com/ossf/scorecard/issues/2189

A collection of reusable GitHub Actions to automate the analyzer release process. This toolbox offers modular automations to reduce manual work for squads, handling tasks like changelog generation, version bumps, and release publishing. These actions help teams focus on code quality by simplifying workflows.

Codebase intelligence for TypeScript and JavaScript. Free static analysis of code and styles: unused code, duplication, circular deps, complexity hotspots, architecture boundaries, design-system drift. Optional paid runtime layer (Fallow Runtime): hot-path review and cold-path deletion evidence from real production traffic.

The website for PyTorch

GitHub Action to render file based on template and passed variables. Secure drop-in replacement for chuhlomin/render-template.

A shared repository for Protobuf CI actions. Secure drop-in replacement for protocolbuffers/protobuf-ci.

Github Action to create, update, or add files to Github Releases

A testing framework for smart contracts and Chainlink nodes

GitHub actions for review-rot

UI for community payback (bootstrapped 2025-08-15)

GitHub Actions for renovate-config-validator

Language-agnostic SLSA provenance generation for Github Actions. Secure drop-in replacement for slsa-framework/slsa-github-generator.

GitHub Action for Detection-as-Code (DaC) powered by RSigma: lint, validate, backtest, and ATT&CK coverage

Creates an ISO for installing a container image as an OS

Action for generating build provenance attestations for workflow artifacts

Neon: Serverless Postgres. We separated storage and compute to offer autoscaling, branching, and bottomless storage.

A collection of actions for automating GitHub projects

A collection of reusable actions used in our projects

Test repository created from policy-based-prs template for integration testing