Supply chain: Actions workflow audit #10

Open

Assignees

Labels

area: backendsupply-chaintype: feature

opened

Audit GitHub Actions usage across repositories.

Parse workflows and flag unpinned actions, broad permissions, and missing OIDC
Compute a risk score per workflow
Endpoint, scan workers, and tests

to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

nakberli841-bot

Labels

area: backendsupply-chaintype: feature

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests