scharf

Scharf is a cybersecurity tool designed to enhance the security of CI/CD pipelines by scanning GitHub workflows for mutable action references and replacing them with immutable commit SHAs. Its primary use case is to prevent supply-chain attacks by ensuring stable dependencies, with notable features including automatic updates of mutable actions, quick SHA lookups from the CLI, and the ability to generate detailed JSON or CSV reports for auditing across multiple repositories.