CVE-2025-30066

Identify all third-party GitHub/GitLab actions used in your Organization without pinned SHA-commits

Scharf Identify all third-party CI/CD actions used in your Organization without pinned SHA-commits using Scharf (Sharpen your CI/CD workflows) Scharf is a CLI tool designed to audit GitHub and GitLab repositories within a specified organization for action workflows that use third-party actions without SHA-based references In other words, tool flags all actions those are vers

Checkmarx-CVE-2025-30066-Detection-Tool

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.

Harden-Runner Corporate laptops and production servers typically have robust security monitoring in place to reduce risk and meet compliance requirements However, CI/CD runners, which handle sensitive information like secrets for cloud environments and create production builds, often lack such security measures This oversight has led to significant supply chain attacks, inclu

EDAMAME Posture: Free CI/CD CLI What?: Lightweight, developer-friendly security posture assessment and remediation tool—perfect for those who want a straightforward way to secure their development environment and CI/CD pipelines without slowing down development Table of Contents Overview Key Features Targeted Use Cases How It Works Security Posture Assessment Methods

Identify all third-party GitHub/GitLab actions used in your Organization without pinned SHA-commits

Sharfer Identify all third-party CI/CD actions used in your Organization without pinned SHA-commits using Sharfer (SHA Rectifier for CI/CD workflows) Sharfer is a CLI tool designed to audit GitHub and GitLab repositories within a specified organization for action workflows that use third-party actions without SHA-based references In other words, Sharfer flags all actions tho

A GitHub action to detect mutable third-party references used in GitHub repository

scharf-action A GitHub action to detect mutable third-party references used in a GitHub repository This action uses Cybrota Scharf tool to identify actions with mutable tags See githubcom/cybrota/scharf for more details Usage jobs: run-unit-tests: runs-on: ubuntu-2204 steps: - name: Checkout repository uses: actions/checkout@11bd71901bbe5b1