From 374bb6317fcd1aca93581b3b15b71f098a090327 Mon Sep 17 00:00:00 2001 From: wille Date: Wed, 8 Jul 2026 14:32:10 +0200 Subject: [PATCH] Add gh-actions-cli to supply chain specific tools --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 071e3a9..c072f0a 100644 --- a/README.md +++ b/README.md @@ -162,6 +162,7 @@ Supply chain is often the target of attacks. Which libraries you use can have a | **kritis** | [https://github.com/grafeas/kritis](https://github.com/grafeas/kritis) | Solution for securing your software supply chain for Kubernetes apps |![Kritis](https://img.shields.io/github/stars/grafeas/kritis?style=for-the-badge)| | **ratify** | [https://github.com/deislabs/ratify](https://github.com/deislabs/ratify) | Artifact Ratification Framework |![ratify](https://img.shields.io/github/stars/deislabs/ratify?style=for-the-badge)| | **chain-bench** | [https://github.com/aquasecurity/chain-bench](https://github.com/aquasecurity/chain-bench) | Supply Chain Audit Tool |![chain-bench](https://img.shields.io/github/stars/aquasecurity/chain-bench?style=for-the-badge)| +| **gh-actions-cli** | [https://github.com/wille/gh-actions-cli](https://github.com/wille/gh-actions-cli) | Pin GitHub Actions to commit SHAs, enforce allowed-actions allowlist policies, and safely update pinned actions |![gh-actions-cli](https://img.shields.io/github/stars/wille/gh-actions-cli?style=for-the-badge)| ## SAST