Assess the risk of third-party GitHub Actions

The git-scm.com website. Note that this repository is only for the website; issues with git itself should go to https://git-scm.com/community.

An extremely fast Python package and project manager, written in Rust.

Commits changes to the repository through the Github api instead of traditional git commands.

Default community health files for the CAP-js organization

A collection of hardened reusable Github Actions and Workflows.

CI/CD GitHub Actions

Secure drop-in replacement for changesets/action.

sccache github action. Secure drop-in replacement for Mozilla-Actions/sccache-action.

A Datacenter Scale Distributed Inference Serving Framework

reusable GHA workflows and actions

Local-first CLI and GitHub Action for KiCad hardware design review, DRC/ERC preflight, BOM risk checks, manufacturing release validation, SARIF output, and PR reporting.

A collection of small, domain-focused integrations to support HMPPS Digital services that need to interact with probation data.

GitHub Action which adds a comment to a pull request's issue. Secure drop-in replacement for mshick/add-pr-comment.

Test repository created from policy-based-prs template for integration testing

A Github action that simply tags the repository with the specified tag.

GitHub Action to set up (download and install) Docker CE. Secure drop-in replacement for docker/setup-docker-action.

Scan your project's dependencies with Code Ready Dependency Analytics

Language-agnostic SLSA provenance generation for Github Actions

create comment on pull request, if exists update that comment.