Skip to main content
Glama
Sign In
github-actions-audit

github-actions-audit

by UnbearableDev
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Remote

Related Servers

Alternatives to github-actions-audit

No user-submitted related servers found.

    Related Servers

    • actions-check

      arhancanli
      A
      license
      A
      quality
      C
      maintenance
      Enables reviewing GitHub Actions workflows for outdated actions, deprecated Node runtimes, retired runners, deprecated commands, and security risks, with file, line, and fix for each finding.
      3
      1
      MIT

    • actions-guard-mcp

      BerkantACUN
      A
      license
      A
      quality
      C
      maintenance
      Scans GitHub Actions workflow files for dangerous triggers, template injection, unpinned actions, excessive permissions, and secrets in shell commands before they are committed, exposing the checks as MCP tools for agents.
      2
      MIT

    • github-actions-audit-mcp

      tylerscomic-lab
      A
      license
      Not graded
      quality
      C
      maintenance
      Enables scanning GitHub Actions workflow YAML for real-world security vulnerabilities such as script injection from attacker-controlled expressions, unpinned third-party actions, missing permissions blocks, and dangerous pull_request_target checkouts. It returns each finding with its exact location, an explanation of the risk, and a concrete remediation.
      MIT

    • civet

      xuange-hu
      A
      license
      Not graded
      quality
      B
      maintenance
      Enables auditing GitHub Actions workflows for security problems directly from an MCP client, returning a risk score and findings with file:line evidence, attack narratives, and fixes. Also exposes the full rule catalog and a one-call demo that writes and scans a deliberately broken workflow.
      MIT

    • ci-sentinel

      Baneado98
      A
      license
      A
      quality
      D
      maintenance
      Security auditor for CI ecosystems that detects supply-chain and injection flaws in CI/CD configuration files across seven CI platforms, providing taint analysis, remediation, and compliance scoring.
      2
      MIT

    This server cannot be deployed

    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    Maintenance

    ActivityInactive
    ResponsivenessOutdated data

    Resources