ActionRank
Check your actions

Aguara Security Scanner

Actively maintained

garagon/aguara · Apache-2.0

The open source security engine for AI agent and supply-chain trust.

★ 85 starsLast commit 8 days agoLatest v0.27.0
B
73
/ 100
Security 75Maintenance 100Popularity 32Reliability 66

Security signals

OpenSSF ScorecardNo data
SECURITY.md presentYes
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: garagon/aguara@2ad546a95a03eb81f5255471c500ca326ee5220b # v0.27.0

Mutable tags like v0.27.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: garagon/aguara@2ad546a95a03eb81f5255471c500ca326ee5220b # v0.27.0

Score breakdown

Security (35%)75
Popularity (20%)32
Maintenance (30%)100
Reliability (15%)66