ActionPin/package.json at main · zhenjing/ActionPin · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
{
  "name": "actionpin",
  "version": "0.2.0",
  "description": "GitHub Actions hardening checker for unpinned actions, risky permissions, secret-touching install scripts, and privileged agent-triggered workflows.",
  "type": "module",
  "bin": {
    "actionpin": "./src/cli.mjs"
  },
  "packageManager": "npm@11.9.0",
  "files": [
    "src",
    "README.md",
    "LICENSE",
    "action.yml",
    "examples"
  ],
  "scripts": {
    "test": "node ./test/checker.test.mjs",
    "lint": "node ./src/cli.mjs --help",
    "smoke": "node ./src/cli.mjs ./test/fixtures/risky --fail-on none"
  },
  "keywords": [
    "github-actions",
    "security",
    "supply-chain",
    "workflow",
    "sarif",
    "code-scanning"
  ],
  "engines": {
    "node": ">=20"
  },
  "publishConfig": {
    "access": "public"
  },
  "license": "MIT",
  "dependencies": {
    "yaml": "^2.8.3"
  }
}