Security GitHub Actions

Detect npm packages compromised in the Shai-Hulud 2.0 supply chain attack (Nov 2025). Scans for 790+ malicious packages, suspicious scripts, TruffleHog activity, SHA1HULUD runners, and secrets exfiltration. GitHub Action with SARIF support.

AI Bill of Materials — discover every AI agent, model, and API in your infrastructure

Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows

A GitHub Action for accessing secrets from Google Secret Manager and making them available as outputs.

Publish from GitHub Actions using multi-factor authentication