io.github.CloudCorpRecords/actionpindev-tools

actionpin

Verified · today

GitHub Actions supply-chain hardener: audit workflows for unpinned actions and build a SHA pin plan.

Install

claude mcp add actionpin -- npx -y @reneturcios/[email protected]

Our take

Audits GitHub Actions workflows for mutable action references and produces a plan for pinning dependencies to commit SHAs. It is useful for maintainers strengthening CI supply-chain security, and npm plus OCI packaging aids deployment, though the zero-star project should be tested carefully before relying on its remediation output.

reviewed by hand · 2026-10-23

Something wrong or dead here? Report it

Verification record

last verified
today
github stars
0
last commit
today
archived
no
license
MIT
npm
@reneturcios/actionpin
latest version
0.1.6
in registry since
2026-10-22

github.com/CloudCorpRecords/actionpin

More in dev-tools

browse all →
context7dev-tools

Context7

Verified · yesterday

Up-to-date docs for AI agents

hand-reviewed63k starschecked yesterday

github-mcp-serverdev-tools

GitHub

Verified · yesterday

Connect AI assistants to GitHub - manage repos, issues, PRs, and workflows through natural language.

hand-reviewed34k starschecked yesterday

validatordev-tools

Oh My Posh Validator

Verified · 3 days ago

Validate oh-my-posh configurations and segment snippets against the official schema.

hand-reviewed24k starschecked 3 days ago

compiler-explorerdev-tools

Compiler Explorer

Verified · 35 days ago

Compile code with thousands of compilers, inspect the assembly, and share godbolt.org links

hand-reviewed19k starschecked 35 days ago

gitdiagramdev-tools

GitDiagram

Verified · 23 days ago

Architecture diagrams, explanations and Mermaid source for public GitHub repositories.

hand-reviewed18k starschecked 23 days ago