Automatically diagnose failed GitHub Actions workflow runs, returning probable cause, suggested fixes, severity, and a diagnostic report.
ISC
Audit GitHub Actions workflows for script injection, unpinned actions and missing permissions.
GitHub Actions workflow security audit - 21 checks: pinning, permissions, secrets, injection.