Lightlines
By getsentry

gha-security-review

getsentry4.5k installs

Find exploitable GitHub Actions flaws before attackers do.

What it does

Finds externally exploitable GitHub Actions workflow vulnerabilities and reports concrete attack scenarios and fixes.

When to use it

Use when asked to review GitHub Actions workflows or audit CI and workflow security.

How to use it

Give it a project containing GitHub Actions workflows; it returns an exploitation-focused security review with findings, fixes, and cleared workflows.

What you provide

  • An existing project

Latest review

What you need · 0

No setup requirements listed.


Access · 0

No additional actions listed.