{"id":17269600,"url":"https://github.com/ckotzbauer/actions-toolkit","last_synced_at":"2026-04-01T19:38:29.918Z","repository":{"id":37050223,"uuid":"439630669","full_name":"ckotzbauer/actions-toolkit","owner":"ckotzbauer","description":"Reusable Actions and Workflows for my personal projects","archived":false,"fork":false,"pushed_at":"2026-03-26T18:53:01.000Z","size":2112,"stargazers_count":2,"open_issues_count":11,"forks_count":2,"subscribers_count":1,"default_branch":"main","last_synced_at":"2026-03-27T07:53:08.029Z","etag":null,"topics":["actions","github-actions","workflow"],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/ckotzbauer.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null},"funding":{"github":"ckotzbauer"}},"created_at":"2021-12-18T14:05:53.000Z","updated_at":"2026-03-20T08:22:40.000Z","dependencies_parsed_at":"2026-02-21T10:04:51.381Z","dependency_job_id":null,"html_url":"https://github.com/ckotzbauer/actions-toolkit","commit_stats":null,"previous_names":[],"tags_count":115,"template":false,"template_full_name":null,"purl":"pkg:github/ckotzbauer/actions-toolkit","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ckotzbauer%2Factions-toolkit","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ckotzbauer%2Factions-toolkit/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ckotzbauer%2Factions-toolkit/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ckotzbauer%2Factions-toolkit/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/ckotzbauer","download_url":"https://codeload.github.com/ckotzbauer/actions-toolkit/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ckotzbauer%2Factions-toolkit/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":31291162,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-01T13:12:26.723Z","status":"ssl_error","status_checked_at":"2026-04-01T13:12:25.102Z","response_time":53,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["actions","github-actions","workflow"],"created_at":"2024-10-15T08:16:53.298Z","updated_at":"2026-04-01T19:38:29.888Z","avatar_url":"https://github.com/ckotzbauer.png","language":null,"funding_links":["https://github.com/sponsors/ckotzbauer"],"categories":[],"sub_categories":[],"readme":"\n# Actions-Toolkit\n\n\u003e Reusable Actions and Workflows for my personal projects.\n\nAll actions and reusable workflows are designed with transparency and security in mind and can be combined as needed. There are actions for different software ecosystems and languages.\n\n## Versioning\n\nThe same immutable git-tag is used for all actions and workflows when they are released. There are no floating-tags for this repository available. The versions are semver based. Third-party actions used internally are referenced with git-sha to prevent unexpected updates and ensure the build-system is reproducible.\n\n\n## Workflows\n\n| Name                                                                     | Description |\n| ------------------------------------------------------------------------ | ----------- |\n| [Build and test](.github/workflows/toolkit-build-test.yml)   | Builds and tests a project with different technologies and tools. |\n| [Lint](.github/workflows/toolkit-lint.yml)   | Lints and checks a project with different technologies and tools. |\n| [Release OCI](.github/workflows/toolkit-release-oci.yml)                 | Releases a OCI-Image project with optional Signing (Cosign), SBOM, SLSA provenance generation, Changelog and a GitHub release. |\n| [Release GoReleaser](.github/workflows/toolkit-release-goreleaser.yml)   | Releases a GoReleaser project with a OCI-Image, optional signing (Cosign), SBOM, SLSA provenance generation, Changelog and a GitHub release. |\n| [Release Node.js](.github/workflows/toolkit-release-nodejs.yml)          | Releases a Node.js project with an optional OCI-Image, NPM-Package, OCI-Signing (Cosign), SBOM, SLSA provenance generation, Changelog and a GitHub release. |\n| [Code Review](.github/workflows/toolkit-review.yml)            | AI-powered code review for pull requests using Claude via OpenRouter. |\n| [Scan Snyk](.github/workflows/toolkit-scan-snyk.yml)          | Scans a project with Snyk. |\n| [SLSA-Provenance](slsa-provenance/README.md) | Generates a provenance-file from artifacts (SLSA Level 1). It can be optionally signed and attested with Cosign (SLSA Level 2). |\n\n\n## Actions\n\n| Name                                                                     | Description |\n| ------------------------------------------------------------------------ | ----------- |\n| [Docker](docker/README.md)   | Creates a OCI-Image with multi-arch support. It can be signed with Cosign optionally. |\n| [Grype](grype/README.md)   | Scans a target for vulnerabilities with grype. |\n| [Push-Release](push-release/README.md)   | Commits and pushes possible changes and creates a GitHub-Release. |\n| [SBOM](sbom/README.md)   | Creates SBOMs from OCI-Images. They can be optionally signed and attested with Cosign. |\n| [Setup-Syft](setup-syft/README.md)   | Installs the syft binary. |\n\n\n## Contributing\n\nPlease refer to the [Contribution guildelines](https://github.com/ckotzbauer/.github/blob/main/CONTRIBUTING.md).\n\n## Code of conduct\n\nPlease refer to the [Conduct guildelines](https://github.com/ckotzbauer/.github/blob/main/CODE_OF_CONDUCT.md).\n\n## Security\n\nPlease refer to the [Security process](https://github.com/ckotzbauer/.github/blob/main/SECURITY.md).\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fckotzbauer%2Factions-toolkit","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fckotzbauer%2Factions-toolkit","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fckotzbauer%2Factions-toolkit/lists"}