An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.
Repository Index
47,133 repositories indexed
1–8 of 8 · Most stars
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
- github-actions
- actions
- supply-chain-security
- hardening
Catch risky npm dependency changes before they merge.
- dependency-analysis
- devsecops
- github-actions
- malware
Plan and apply Terraform/OpenTofu via PR automation, using best practices for secure and scalable IaC workflows.
Real-time secret-leak guardrails for AI coding agents (Claude Code, Codex), Git hooks, and CI.
A developer CLI tool that manages .env files, detects secret leaks, syncs env drift across teammates, and validates environment parity between local/staging/prod all from your terminal. Written in Go.
Prompt-injection firewall for LLM applications — 33 input detectors, 9 output scanners, federated ed25519-signed threat-intel feed. Apache 2.0, 1040 tests, F1 96.0% with 0% false positives. Docker, GitHub Action, LangChain/LlamaIndex/CrewAI integrations.
- agentic-ai
- ai-safety
- fastapi
- langchain
Pin AI Skill behavior. Block unapproved drift in CI. See exactly what changed in every PR.
- ai
- ai-skills
- apache-2
- claude-code