A CLI tool for managing GitHub Actions workflows
Free open-source wrapper of pip to avoid supply-chain attacks
CI security scanner for AI agents. Detects prompt injection risks, unsafe tool permissions, and generates OpenPAKT reports.
Cut vuln noise to near-zero by proving which CVEs are actually callable from your app’s entry points, using open CLIs, reproducible SBOMs, and CI-first workflows.
Distribution packages and deployment artifacts for Chainguard's Octo STS token service
OpenPAKT: Open Protocol for Agent Knowledge Trust — a language-agnostic specification for AI agent security findings, scenarios, and CI policy gating.
Analyses and pins GitHub actions in your workflows
Static analysis for AI automation workflows. Find prompt-injection paths, overpowered tools, and write-capable agent jobs before they run.
Pre-delivery truth infrastructure
Scan CI/CD workflows for unsafe AI coding-agent usage.
Scan GitHub Actions, agent instructions, and MCP configs for AI-agent injection risks
Behavioral multi-turn prompt injection detection for LLM applications. Built for CI workflows.
Scan AI agent prompts and workflows for security risks in CI and generate OpenPAKT-compliant reports
Add a description, image, and links to the ci-security topic page so that developers can more easily learn about it.
To associate your repository with the ci-security topic, visit your repo's landing page and select "manage topics."