Skip to main content
Glama
649,985 tools. Updated 2026-10-09 03:58

"GitHub Actions" matching MCP tools:

  • Scan a PUBLIC GitHub repo for GitHub Actions + CI security/maintenance hygiene before launch — ideal for apps built with Lovable, Bolt, Replit, Cursor, or v0 ("is my AI-built app safe to ship?"). Returns a safe summary: findings by category with counts, an unlisted report URL, and fix options. SCOPE, honestly: it checks GitHub Actions workflow + update-automation hygiene only — it does NOT check exposed secrets, auth, payments, webhooks, or runtime behavior, which need a manual review. No API key required. For PRIVATE repos, tell the user to run `npx taskbounty-check .` locally so their source never leaves their machine.
    ConnectorNo auth
  • Given one package and two versions (from -> to), returns a structured upgrade analysis: semver classification, GitHub release notes summary, detected breaking changes, security advisories fixed in the range, migration guide links, and a clear recommendation. Use when the user asks about a specific package upgrade ('what changed between react 18 and 19', 'is it safe to bump axios from 0.27 to 1.0', 'what does upgrading lodash 4.17.20 to 4.17.21 fix'). Supports npm, pypi, and github-actions (use the action reference as the name, e.g. actions/checkout). For analyzing many packages at once or a Dependabot batch, use analyze_packages_bulk instead.
    ConnectorNo auth
  • Ranks your GitHub org's Actions workflows and repos by real compute cost, using your account's spendtron connection (no arguments needed — identified by your API key).
    ConnectorNo auth
  • Use this when a user asks how much their GitHub Actions CI/CD pipeline costs per month, or wants to compare runner costs. Takes average job duration, jobs per run, monthly run count, and runner type. Returns monthly billing cost with runner multiplier breakdown.
    ConnectorNo auth
  • Estimate a GitHub Actions monthly bill using the January 2026 runner rates (Linux $0.006/min, Windows $0.010, macOS $0.062), accounting for plan allowances. Also reports what the same workload cost before the price cut.
    ConnectorNo auth

Matching MCP Servers

Matching MCP Connectors

  • Audit GitHub Actions workflows for script injection, unpinned actions and missing permissions.

  • GitHub Actions workflow security audit - 21 checks: pinning, permissions, secrets, injection.