danielroe/provenance-action

Fail CI when dependencies in your lockfile lose npm provenance or trusted publisher status

3 best points · 2 comments · 1 Hacker News post · 308 GitHub stars · View on GitHub

Hacker News discussions

• GitHub Action to catch unsafe NPM package updates in lockfiles (3 points, 2 comments, by mustaphah, 2025-09-17)