Developer Tools●●Solid
Gha-outrunner – Ephemeral GitHub Actions runners without Kubernetes
Ephemeral CI runners without Kubernetes overhead for bare metal and macOS Apple Silicon.
Solve My ProblemNiche Gem
psubocz
103mo ago
Back to browse
GitHub Repository
1 starsPython
Action-locker: pin, verify, and vendor GHAs
by sudosteph·Jul 7, 2026·3 points·1 comment
AI Analysis
●●SolidBig BrainSolve My Problem
Single stdlib-only Python file means the supply chain tool has no supply chain.
Strengths
- •Zero dependencies - entire tool is one readable Python file you can audit
- •Age-gating prevents locking to brand-new actions before bugs surface
- •Vendoring protects against repo deletion, not just tag retagging
Weaknesses
- •Action pinning already solved by Dependabot and other established tools
- •No mention of automatic PR updates when newer safe versions exist
Category
Target Audience
DevOps engineers, security-conscious teams using GitHub Actions
Similar To
Dependabot · StepSecurity · pinact
Similar Projects
Security●●Solid
Ghapin – Tool to pin GitHub Actions to SHAs for supply-chain security
Automates SHA pinning with --comment flag to preserve original tags inline.
Niche GemShip It
theden
202mo ago
Security●●Solid
I built a Cargo supply chain auditor using Claude and GitHub Actions
Tarball diffing plus Claude analysis catches build.rs backdoors cargo-audit misses.
Big BrainSolve My Problem
T-RN-R
303mo ago
Security●Mid
Proving sdocs.dev is running the public code
SHA-256 hash verification via CI, but reproducible builds already solve this.
Niche Gem
FailMore
202mo ago
Open Source●●Solid
Open-source digital signage ecosystem to escape vendor lock-in
Open-source digital signage stack with 99% test coverage competing against Xibo and Screenly.
Niche GemSolve My Problem
sagiadinos
104mo ago
Security●●●Banger
Abom – Actions Bill of Materials for GitHub Actions Supply Chains
SBOMs for CI/CD pipelines catch transitive action deps that grep misses entirely.
Solve My ProblemDark Horse
julietsecurity
213mo ago