Skip to main content
Glama
Sign In

GitHub Actions Security Audit

by io.github.tylerscomic-lab
OverviewDiscussionsAdmin

Server Details

Audit GitHub Actions workflows for script injection, unpinned actions and missing permissions.

The last two health checks of this connector failed. If this server requires authentication, missing or expired test credentials may be the cause. A test profile lets Glama authenticate for health checks and discover tools; it is separate from your personal connections.

If you are the author, claim ownership, then add or update a test profile under Admin → Test Profile.

Status
Unhealthy
Uptime
0.0% over the last 24 hours
OAuth
Works in Glama
Last Tested
Transport
Streamable HTTP
URL
Repository
tylerscomic-lab/github-actions-audit-mcp
GitHub Stars
0
Server Listing
github-actions-audit-mcp
ChatGPT
–
Claude
–

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    Related MCP Connectors

    Related MCP Servers

    • github-actions-audit

      UnbearableDev
      F
      license
      Not graded
      quality
      D
      maintenance
      Audits GitHub Actions workflow files for supply-chain risks like script injection, leaked tokens, unpinned actions, and broad permissions.
      -

    • actions-check

      arhancanli
      A
      license
      A
      quality
      C
      maintenance
      Enables reviewing GitHub Actions workflows for outdated actions, deprecated Node runtimes, retired runners, deprecated commands, and security risks, with file, line, and fix for each finding.
      3
      1
      MIT

    • workflowlint-mcp

      0xmortuex
      A
      license
      A
      quality
      B
      maintenance
      Enables offline auditing of GitHub Actions workflows through MCP, surfacing security and correctness findings with exact file/line locations and fixes, explaining cron schedules, visualizing job dependencies, reviewing token permissions, planning commit-SHA pins, and previewing safe patches proven by re-linting.
      7
      MIT

    • actions-guard-mcp

      BerkantACUN
      A
      license
      A
      quality
      C
      maintenance
      Scans GitHub Actions workflow files for dangerous triggers, template injection, unpinned actions, excessive permissions, and secrets in shell commands before they are committed, exposing the checks as MCP tools for agents.
      2
      MIT
    Try in Browser
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    Glama MCP Gateway

    Add one secure layer between your agents and this server.

    Resources