Supply Chain

Before Your Code Runs: Exploiting Implicit Attack Surfaces

Beyond Prompt Injection: Practical Security Engineering for Agentic Systems

actsense - GitHub Actions Workflow Auditor

lote.guide - A catalog of files, env vars, flags, and hooks that run before your code Live

actsense - Workflow Security Auditor - See every dependency your CI workflows actually run, and fix what it exposes Live Code

pin. - Resolve dependencies to immutable, pinned references Live Code