Run dcode in GitHub workflows
uses: langchain-ai/deepagents@7e70065200007896336f38fe905803e6763e8f85 # deepagents==0.6.12tags can be moved; commit SHAs can't. why a SHA?
The unofficial GitHub Actions database.
Find a GitHub Action by name, and copy a paste-ready pinned uses: snippet.
Run dcode in GitHub workflows
uses: langchain-ai/deepagents@7e70065200007896336f38fe905803e6763e8f85 # deepagents==0.6.12tags can be moved; commit SHAs can't. why a SHA?
An infographics generator with 40+ plugins and 300+ options to display stats about your GitHub account!
uses: lowlighter/metrics@65836723097537a54cd8eb90f61839426b4266b6 # v3.34tags can be moved; commit SHAs can't. why a SHA?
Run Prowler cloud security scanner using the official Docker image
uses: prowler-cloud/prowler@7345e051cf5a54e1bf5ac47e1055f9afe28a919b # 5.33.1tags can be moved; commit SHAs can't. why a SHA?
Scan React codebases for security, performance, and correctness issues
uses: millionco/react-doctor@dfccac44e4468dd971e2a4fe8e44a49ba91f498a # deslop-cli@0.7.4tags can be moved; commit SHAs can't. why a SHA?
AI-powered GitHub PR review with inline comments, sticky summary, and incremental non-destructive posting.
uses: alibaba/open-code-review@802af6b461d17408856fac0d07a18f9b17d6d38c # v1.7.7tags can be moved; commit SHAs can't. why a SHA?
Runs end-to-end tests against a self-hosted instance built from the current branch. You can optionally specify a custom image to test against as well.
uses: getsentry/self-hosted@4c9ceba8d80dbb5d20f2fee72c49f0d93508edfe # 26.6.0tags can be moved; commit SHAs can't. why a SHA?
Support Amlogic, Rockchip and Allwinner boxes.
uses: ophub/amlogic-s9xxx-armbian@87c6e6f170a3098b514c9a141db11e43caa060e8 # Armbian_noble_arm64_server_2026.07tags can be moved; commit SHAs can't. why a SHA?
Checkout a Git repository at a particular version
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0tags can be moved; commit SHAs can't. why a SHA?
Flexible GitHub automation platform with Claude. Auto-detects mode based on event type: PR reviews, @claude mentions, or custom automation.
uses: anthropics/claude-code-action@536f2c32a39763739000b0e1ac69ca2647d97ce9 # v1tags can be moved; commit SHAs can't. why a SHA?
Executing remote ssh commands
uses: appleboy/ssh-action@0ff4204d59e8e51228ff73bce53f80d53301dee2 # v1.2.5tags can be moved; commit SHAs can't. why a SHA?
AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities
uses: anthropics/claude-code-security-review@0c6a49f1fa56a1d472575da86a94dbc1edb78eda # no releases — HEAD as of 2026-07-10tags can be moved; commit SHAs can't. why a SHA?
Cache artifacts like dependencies and build outputs to improve workflow execution time
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0tags can be moved; commit SHAs can't. why a SHA?
Build Armbian Linux
uses: armbian/build@a7f3a943d30769d5657354e9660329171ca5c39d # v26.8.0-trunk.343tags can be moved; commit SHAs can't. why a SHA?
Manage terraform collaboration
uses: diggerhq/digger@6baf84cd9cd7c6522b98504f4a2258474d6c2de3 # v0.6.147tags can be moved; commit SHAs can't. why a SHA?
Run simple scripts using the GitHub client
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0tags can be moved; commit SHAs can't. why a SHA?
Setup a Node.js environment by adding problem matchers and optionally downloading and adding it to the PATH.
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0tags can be moved; commit SHAs can't. why a SHA?
This action will handle the deployment process of your project to GitHub Pages.
uses: jamesives/github-pages-deploy-action@d92aa235d04922e8f08b40ce78cc5442fcfbfa2f # v4.8.0tags can be moved; commit SHAs can't. why a SHA?
Deterministic codebase intelligence for TypeScript/JavaScript in CI: quality, PR risk, hotspots, duplication, architecture.
uses: fallow-rs/fallow@c9326d9395c0b46f4077290473060b3e950b6e8c # v3.3.0tags can be moved; commit SHAs can't. why a SHA?
Run typos to check spelling in GitHub actions
uses: crate-ci/typos@bee27e3a4fd1ea2111cf90ab89cd076c870fce14 # v1.48.0tags can be moved; commit SHAs can't. why a SHA?
Drafts your next release notes as pull requests are merged into your branch(es).
uses: release-drafter/release-drafter@4d75298e00d9e34c483e5ff8c68d0ea1c1940c1e # v7.5.1tags can be moved; commit SHAs can't. why a SHA?