1. Conduid
  2. Security
  3. GitHub Actions Audit
MCP server · Security

GitHub Actions Audit

by · github.com/UnbearableDev/github-actions-audit

GitHub Actions workflow security audit - 21 checks: pinning, permissions, secrets, injection.

Unclaimed security
InstallView source
34Low

Scored 4 months ago · breakdown

About GitHub Actions Audit

GitHub Actions Audit is an MCP server published by UnbearableDev in the Security category: gitHub Actions workflow security audit - 21 checks: pinning, permissions, secrets, injection.

Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/UnbearableDev/github-actions-audit

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (8)

audit_workflow(workflow_yaml? \workflow_url?, min_severity='low')`

Parameters not published.

check_action_pinning(...)Action version-pinning only

Parameters not published.

check_permissions(...)`GITHUB_TOKEN` scope issues only

Parameters not published.

check_runner_security(...)Self-hosted runner + script injection

Parameters not published.

check_secrets(...)Secret-leakage paths only

Parameters not published.

check_supply_chain_advanced(...)TeamPCP-class supply-chain patterns (GHA-201..208)

Parameters not published.

check_workflow_config(...)Timeout / config hygiene

Parameters not published.

list_checks(category?)Browse the catalog

Parameters not published.

Ask AI

✦

Ask AI about GitHub Actions Audit

Powered by Claude · Grounded in docs

I know everything about GitHub Actions Audit. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About GitHub Actions Audit

How do I install GitHub Actions Audit?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is GitHub Actions Audit safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is GitHub Actions Audit still maintained?

Yes — the last commit was 4 months ago. The repository has 0 stars and 0 forks.