cybrota/scharf
View on GitHub ↗ ★ 15 Go
Static analysis tool to Identify and Fix GitHub Actions prone to Supply‑Chain Risks
4 mentions on Hacker News by 1 person: 2 stories, 2 comments · first 2025-03-31 · latest 2025-05-13
20082026
-
▲ 2
Scharf: A fast SAST tool to fix GitHub Actions supply chain risksstory by nyell · 2025-05-13 · 0 comments
-
…those are prone to supply-chain attacks. It is blazing fast and written in Go. Project link: https://github.com/cybrota/scharf Quick demo: https://imgur.com/a/wEyk9AR This tool can cutdown hours of grind for Security engineers.
comment by nyell · 2025-04-30 · in Ask HN: What are you working on? (April 2025) -
▲ 1
Show HN: Scharf – Find and protect ur GitHub Actions from supply-chain attacksstory by nyell · 2025-03-31 · 0 comments
-
…etc.) is a security vulnerability that can result in supply-chain attacks. Project link: https://github.com/cybrota/scharf
comment by nyell · 2025-03-31 · in Ask HN: What are you working on? (March 2025)