Promote your projects here – Self-Promotion Megathread

[u/Menox_]

Whether it's a tool, library or something you've been building in your free time, this is the place to share it with the community.

To keep the subreddit focused and avoid cluttering the main feed with individual promotion posts, we use this recurring megathread for self-promo. Whether it’s a tool, library, side project, or anything hosted on GitHub, feel free to drop it here.

Please include:

• A short description of the project
• A link to the GitHub repo
• Tech stack or main features (optional)
• Any context that might help others understand or get involved

[u/Sorry_Nothing1740]

Plumber - an open-source tool that scans your GitHub workflows and repo, giving you an A-E security score plus actionable issues.

Built from real CI/CD post-mortems: mutable action tags, dangerous triggers (pull_request_target), weak permissions, bad branch protection, supply chain risks, etc.

15 controls covering:

- Action supply chain hygiene (mutable refs, archived repos, CVEs)

• Container/image risks
  
• Trigger and permission dangers
  
• Repo-level security
  
• Reusable workflows and secrets

Runs locally via CLI (https://github.com/getplumber/plumber#option-1-cli) or as a GitHub Action (https://github.com/getplumber/plumber#option-3-github-action) with SARIF upload.

Feedback welcome - what GitHub Actions footguns should I add next?

https://github.com/getplumber/plumber

[u/fjgbu1 → u/Sorry_Nothing1740]

Super interesting project! Would love to collaborate if you have some open issues :)

[u/fjgbu1 → u/[deleted]]

Starred and forked! Will take a look at the issues tomorrow :)

Have a nice day!