A small repository that tracks pinned GitHub Actions metadata so workflows can reference immutable commit SHAs. It maintains a CSV source list plus a published pins.json, with an issue-and-label workflow that validates requests and auto-merges updates.
OPEN SOURCE, OPEN TO EVERYONE
Open source. Open possibilities.
Discover quality open-source projects, submit projects anonymously, and claim and edit your own project.
✳Human-curated · Discover open source4100discovered
A little curiosity. A world of open source.
THE FIRST COLLECTIONRising stars
Less than 10 stars, 5+ commits in the last 30 days — projects made with care.
Topic: supply-chain-security清除
github-actions-pinsunfunco
ADDEDskillguardmannanj
ADDEDSkillGuard is a local-first security scanner for coding-agent skills and MCP servers. It detects prompt injection, credential theft, data exfiltration and unsafe downloads, then blocks unscanned or risky tools via Claude Code and Codex hooks.
sunglassessunglasses-dev
ADDEDSUNGLASSES is a local, open-source input inspection layer for AI agents. It scans text, images, audio, video, PDFs and QR codes for prompt injection, credential exfiltration and command injection, and provides a CLI, Python API, MCP server and Claude Code firewall hook.