Record · corpus.blog/posts/01a0874c-b25a-71f7-9b35-56c0be506430

Comparison of GitHub Action Scanners

blog.kammel.dev · published 17 May 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.kammel.dev Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 45
Words captured: 2,954

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://docs.github.com/en/actions

docs.github.com

https://github.com/zizmorcore/zizmor

github.com

https://github.com/boostsecurityio/poutine

github.com

https://github.com/synacktiv/octoscan

github.com

https://github.com/snyk-labs/github-actions-scanner

github.com

https://github.com/openpubkey/opkssh

github.com

https://github.blog/changelog/2025-05-08-updated-rate-limits-for-unauthenticated-requests/

github.blog

https://github.com/settings/tokens

github.com

https://docs.zizmor.sh/

docs.zizmor.sh

https://www.wiz.io/blog/github-actions-security-guide

wiz.io

https://grafana.com/blog/2025/05/15/grafana-security-update-post-incident-review-for-github-workflow-vulnerability-and-whats-next/

grafana.com

https://www.wiz.io/blog/github-action-tj-actions-changed-files-supply-chain-attack-cve-2025-30066

wiz.io

https://www.wiz.io/blog/new-github-action-supply-chain-attack-reviewdog-action-setup

wiz.io

https://docs.zizmor.sh/installation/

docs.zizmor.sh

https://docs.oasis-open.org/sarif/sarif/v2.1.0/sarif-v2.1.0.html

docs.oasis-open.org

https://docs.github.com/en/code-security/code-scanning/integrating-with-code-scanning/sarif-support-for-code-scanning

docs.github.com

https://docs.zizmor.sh/audits/

docs.zizmor.sh

ArtiPACKED: Hacking Giants Through a Race Condition in GitHub Actions Artifacts Read at the source ↗

unit42.paloaltonetworks.com

https://docs.github.com/en/actions/security-for-github-actions/security-guides/automatic-token-authentication

docs.github.com

https://docs.github.com/en/enterprise-cloud@latest/admin/enforcing-policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise

docs.github.com

https://docs.github.com/en/actions/security-for-github-actions/security-guides/security-hardening-for-github-actions

docs.github.com

GitHub Actions Supply Chain Attack: A Targeted Attack on Coinbase Expanded to the Widespread tj-actions/changed-files Incident: Threat Assessment (Updated 4/2) Read at the source ↗

unit42.paloaltonetworks.com

https://pin-gh-actions.kammel.dev/

pin-gh-actions.kammel.dev

https://github.com/stacklok/frizbee/releases

github.com

https://docs.renovatebot.com/presets-helpers/

docs.renovatebot.com

The Monsters in Your Build Cache - GitHub Actions Cache Poisoning Read at the source ↗

adnanthekhan.com

https://github.com/actions/setup-go/blob/main/action.yml

github.com

https://boostsecurity.io/

boostsecurity.io

https://docs.gitlab.com/ee/ci/pipelines/pipeline_architectures.html

docs.gitlab.com

https://docs.microsoft.com/en-us/azure/devops/pipelines/get-started/pipelines-get-started?view=azure-devops

docs.microsoft.com

https://tekton.dev/

tekton.dev

https://github.com/boostsecurityio/poutine/releases

github.com

https://boostsecurityio.github.io/poutine/rules/github_action_from_unverified_creator_used/

boostsecurityio.github.io

https://github.com/marketplace?query=sort%3Apopularity-desc&type=actions&verification=verified_creator

github.com

https://partner.github.com/

partner.github.com

https://docs.github.com/en/actions/sharing-automations/creating-actions/publishing-actions-in-github-marketplace

docs.github.com

https://synacktiv.com/

synacktiv.com

https://github.com/synacktiv/octoscan/releases

github.com

https://github.com/synacktiv/octoscan?tab=readme-ov-file

github.com

https://docs.github.com/en/actions/using-github-hosted-runners/using-github-hosted-runners/about-github-hosted-runners

docs.github.com

https://github.com/synacktiv/octoscan/issues/28

github.com

https://github.com/snyk-labs/github-action-scanner

github.com

https://snyk.io/

snyk.io

https://github.com/nvm-sh/nvm

github.com

https://github.com/openpubkey/opkssh/pull/198

github.com