ghtkn was featured in DevOps "Office Hours" (2025-09-17) 🎉 www.youtube.com/watch?v=jCgK...

My new OSS project, ghtkn, is out! It’s a CLI tool for creating user access tokens for a GitHub App via Device Flow, designed for secure local development. No more relying on long-lived access tokens. github.com/suzuki-shuns...

Introducing ghtkn — Your Safer GitHub Token Solution dev.to/suzukishunsu...

google/wire was archived. github.com/google/wire

pinact v3.4.1 is out 🎉 Fix the confusing error message `action isn't pinned` when it fails to handle a line due to GitHub API error. github.com/suzuki-shuns...

pinact v3.4.0 is out 🎉 You can now fix or exclude only specific actions by regular expression using command line options. github.com/suzuki-shuns...

tfaction v1.18.0 🎉 Now tfaction can create commits and pull requests using Securefix Action. It improves the security of your Terraform workflows. github.com/suzuki-shuns...

Securefix Action v0.2.0 🎉 You can now change the repository and branch where a commit is pushed. You can also create pull requests. You can replace insecure commit and pr generation with Securefix Action, elevating the security to the next level. github.com/csm-actions/...

validate-pr-review-action v0.0.8 🎉 Supported `merge_group` event without any settings. github.com/suzuki-shuns...

🍻 tfmv 🍻 CLI to rename Terraform resources and generate moved blocks 🔗 https://github.com/suzuki-shunsuke/tfmv #homebrew #newpkg #macos #linux #formula

🍻 ghalint 🍻 GitHub Actions linter 🔗 https://github.com/suzuki-shunsuke/ghalint #homebrew #newpkg #macos #linux #formula

TIL: Aqua CLI Version Manager www.ianlewis.org/til/2025/04/...

🍻 You can now install tfcmt using the official Homebrew Formula 🍻

I've released a new GitHub Action to validate pull request reviews. It enforces the requirement for reviews and prevents pull requests from being merged without proper review. github.com/suzuki-shuns...

aqua v2.51.1 is out 🎉 You can now manage a GitHub Access token using secret store such as Windows Credential Manager, macOS Keychain, and GNOME Keyring. github.com/aquaproj/aqu...

I wrote the document about the Client/Server Model to make GitHub Actions secure. You can protect server workflows with strong permissions and credentials by separating them from client workflows. For details, please see the document. github.com/csm-actions/...

pinact solves the problem of malware inside GitHub actions (already happening in practice). It automatically pins actions to a specific commit (since regular version tags can be re-released) and updates them later. It’s like a lockfile, but for CI. github.com/suzuki-shuns...

pinact v3 is out 🎉 There are several breaking changes. These changes make pinact securer by default. For more details, please check the release note out. github.com/suzuki-shuns...

Do you pin GitHub Actions versions to full length commit hash? If so, how about verifying checksums when downloading assets from GitHub Releases or somewhere? You can verify checksums and update checksums easily using aqua. aquaproj.github.io/docs/guides/...

cmdx v2.0.0 is out 🎉 - The default shell is changed from sh to `bash -euo pipefail`. If bash isn't available, sh is used. - The format of pre-built binaries for Windows is changed from tar.gz to zip github.com/suzuki-shuns...

actions/create-github-app-token has supported custom permissions 🎉 github.com/actions/crea... github.com/actions/crea...

The number of stars for pinact increased by about 90 due to the tj-actions incident. 💫

This post introduces how to pin GitHub Action versions across all repositories in your organization. Pin GitHub Actions to a full length commit SHA for Security dev.to/suzukishunsu...

The popular GitHub Action tj-actions/changed-files was compromised. To avoid this kind of threats, pinning action versions by full commit hash is recommended. You can do it using pinact, which is a CLI to pin GitHub Actions by one command. github.com/suzuki-shuns...

🎉 I'm really glad to announce my new OSS project. Securefix Action is GitHub Actions to fix code securely. It elevates the security of your workflows to the next level. It allows you to fix code without sharing a secret having strong permissions with workflows widely. github.com/securefix-ac...

aqua, pinact, and tfprovidercheck were added to Homebrew Core Formula! $ brew install aqua pinact tfprovidercheck formulae.brew.sh/formula/aqua formulae.brew.sh/formula/pinact formulae.brew.sh/formula/tfpr...

lock-action v0.1.6 is out 🎉 You can now delete branches when releasing locks. If you don't need to keep all histories, this option is useful to keep branches clean. And this also allows you to search locked keys interactively via GitHub UI. github.com/suzuki-shuns...

I wrote a blog post about commit-action, a GitHub Action to create and push verified commits to fix code automatically via CI. Unlike similar actions, commit-action can create verified commits using GitHub API rather than Git. Fix Code Via GitHub Actions By Verified Commits dev.to/suzukishunsu...

GitHub Action to push changes to remote branches by GitHub API. You can create verified commits using GitHub App github.com/suzuki-shuns...

Go library to show the help of all commands of CLIs built with urfave/cli/v2. This is useful if you want to put the usage of CLI into the document. github.com/suzuki-shuns...

Recently I started using autofix.ci. It's awesome. - You can fix pull requests from fork securely - Easy to use. You don't need to take care of how to create and push commits - Commits are signed - You no longer need to branch processing based on whether the pull request is from a fork or not

1K 🌟 github.com/aquaproj/aqua

aqua v2.43.0 is out 🎉 aqua vacuum command was added. Now you can remove unused packages by aqua vacuum command, which is useful to save storage and keep your machine clean. For details, please see the release note. github.com/aquaproj/aqu...

tfmv was featured in Terraform Weekly 🎉 tfmv is a CLI to rename Terraform resources, data sources, and modules and generate moved blocks. www.weekly.tf/p/issue-209-...

aqua was featured in DevOps "Office Hours" (2025-01-15) 😍 www.youtube.com/watch?v=MP5U...

lintnet is a general purpose linter powered by Jsonnet. It is secure, powerful, and reusable. The goal is to build a framework and ecosystem for Policy as Code. You can define, distribute, and reuse lint rules for any kind of structured files such as JSON and YAML. lintnet.github.io

ghalint is a GitHub Actions Linter written in Go. It finds various issues (mainly security issues). github.com/suzuki-shuns...

ghalint and lintnet were featured in DevOps "Office Hours" (2025-01-08). Thank you always. 🥰 www.youtube.com/watch?v=yxxM...

tfmv was featured in DevOps "Office Hours" (2025-01-01) 🎉 www.youtube.com/watch?v=UwDc...

Now pinact can update actions! github.com/suzuki-shuns...

tfrstate was featured in DevOps "Office Hours" (2024-12-18) 🎉 www.youtube.com/watch?v=cDo7...

If you're interested in the security of GitHub Actions, you should disable checkout's persist-credentials as much as possible. I've developed linters and an auto-fix tool. Please check it out: github.com/suzuki-shuns... github.com/lintnet-modu... github.com/suzuki-shuns...

I've published JSON Schema for configuration files of my CLIs such as aqua, tfcmt, github-comment, and so on. Using these JSON Schema, editors such as VSCode can complement inputs and warn invalid settings. For details, please see the comment. github.com/szksh-lab/.g...

tfaction v1.14.0 was out 🎉 Now test-module action can fix Terraform configuration by tflint --fix github.com/suzuki-shuns...

Look back on updates of aqua in 2024 and what's next in 2025 github.com/aquaproj/aqu...

Refactor Terraform Resource Names By One Command This post introduces tfmv, a CLI tool that simplifies refactoring Terraform resource names with just one command. Using tfmv, you can efficiently rename Terraform resources and generate moved blocks. dev.to/suzukishunsu...

tfaction v1.13.2 is out 🎉 We’ve streamlined nine JavaScript Actions into a single unified Action, simplifying both development. We’ve eliminated about 9,000 lines of code! 🚀 The build process is now simpler and faster. Automatic testing has been improved. github.com/suzuki-shuns...

tfaction v1.13.1 is out 🎉 You can now fix Terraform Configuration by `tflint --fix`. For details, please see the release note. github.com/suzuki-shuns...

aqua v2.40.0 is out 🎉 aqua.yaml can now read package versions from external files! github.com/aquaproj/aqu...

🎉 tfrstate Featured in Terraform Weekly 🎉 tfrstate is a CLI tool that identifies directories dependent on Output Values in Terraform. This is especially useful for triggering warnings about Output Value changes of terraform_remote_state data sources during CI processes. www.weekly.tf/p/issue-204-...