iac.github-actionsGitHub Actions workflows
Checks workflows for unpinned actions, over-broad token permissions, pwn requests, script injection, leaked secrets and unsafe runners.
- Engine
- Built-in
- Targets
- Infrastructure as code
- Areas
- Security, Supply chain, Best practices
- Runs
- By default, when the target applies
- Network
- Only the target itself
Run only this auditor
bunx openaudit . --only iac.github-actionsBuilt into openaudit; nothing to install.