thepwagner

hermit

Hermetic container builds in ephemeral Firecracker. SLSA L4 any% speedrun.

http-env-echo

Simple HTTP server that dumps an environment variable.

sbom-action

SBOM Action

actions-templates

Synchronizes GitHub Actions configuration across repositories using SOPS and Go templates.

add-write-permissions-for-codeowners

A GitHub Action to add write permissions for CODEOWNERS.

archivist

cloudflare-exporter

Prometheus CloudFlare Exporter

comment-deploy

cyclonedx-javascript-library

Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser) written in TypeScript.

dependabot-core

🤖 The core logic behind Dependabot's update PR creation. For product feedback see: https://github.com/github/feedback/discussions/categories/dependabot-feedback

docker-hello

Tiny Dockerfile for testing

dotfiles

echo-timer

:microscope: Reply to issue_comment with time delta, used for testing.

ejson2env

Decrypt EJSON secrets and export them as environment variables.

ghcr-reaper

github-token-factory-oidc

go-containerregistry

Go library and CLIs for working with container registries

hansel

hedge

Proxying package registry and walled garden perimeter.

heroku-buildpack-go

Heroku Go Buildpack

renovate

Universal dependency update tool that fits into your workflows.

renovate-kustomize-image-digests

repo-rules-sandbox

scorecard

OpenSSF Scorecard - Security health metrics for Open Source

sops

Simple and flexible tool for managing secrets

ssh-clone-test

syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

thepwagner

token-action

trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more