Find CI security risks with fixes you can review.
Reviews GitHub Actions workflows for security risks and delivers prioritized findings with concrete fixes for user review.
When to use it
Use when reviewing, auditing, or hardening GitHub Actions workflows, or authoring a workflow that should be secure by default.
Give it workflows in your project to review; it returns a severity summary and detailed findings with proposed fixes without applying changes.
What you provide
No setup requirements listed.
No additional actions listed.