search

DataDog / guarddog

:snake: :mag: GuardDog is a CLI tool to Identify malicious PyPI and npm packages
https://securitylabs.datadoghq.com/articles/guarddog-identify-malicious-pypi-packages/
Apache License 2.0
611 stars 44 forks source link

Scanning GitHub Actions? #454

Open christophetd opened 2 months ago

christophetd commented 2 months ago

following https://orca.security/resources/blog/typosquatting-in-github-actions/