github-starred/awesome-cicd-security
2
0
Fork 0
mirror of https://github.com/myugan/awesome-cicd-security.git synced 2026-11-09 00:29:12 -06:00
Code Issues 7 Packages Projects Releases Wiki Activity

[PR #32] Add gha-audit to Tools #38

New Issue
Open
opened 2026-08-04 10:25:54 -05:00 by GiteaMirror · 0 comments
GiteaMirror commented 2026-08-04 10:25:54 -05:00
Owner
Copy Link
Copy Source

📋 Pull Request Information

Original PR: https://github.com/myugan/awesome-cicd-security/pull/32
Author: @Hiro-012
Created: 8/4/2026
Status: 🔄 Open

Base: main ← Head: patch-1

📝 Commits (1)

📊 Changes

1 file changed (+1 additions, -0 deletions)

View changed files

📝 README.md (+1 -0)

📄 Description

Adds gha-audit (https://github.com/Hiro-012/gha-audit), a static scanner for GitHub Actions workflow files (unpinned actions, pwn request pattern, script injection, overly broad permissions). Fits alongside octoscan/zizmor/actionlint in the Tools section. 100% recall / 0% false-positive rate on a 15-fixture accuracy corpus.

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/myugan/awesome-cicd-security/pull/32 **Author:** [@Hiro-012](https://github.com/Hiro-012) **Created:** 8/4/2026 **Status:** 🔄 Open **Base:** `main` ← **Head:** `patch-1` --- ### 📝 Commits (1) - [`70dde24`](https://github.com/myugan/awesome-cicd-security/commit/70dde24655d6289e84a3d9fef17d5e4206170923) Add gha-audit to Tools ### 📊 Changes **1 file changed** (+1 additions, -0 deletions) <details> <summary>View changed files</summary> 📝 `README.md` (+1 -0) </details> ### 📄 Description Adds gha-audit (https://github.com/Hiro-012/gha-audit), a static scanner for GitHub Actions workflow files (unpinned actions, pwn request pattern, script injection, overly broad permissions). Fits alongside octoscan/zizmor/actionlint in the Tools section. 100% recall / 0% false-positive rate on a 15-fixture accuracy corpus. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-08-04 10:25:54 -05:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
enhancement
pull-request
Mirrored from GitHub Pull Request
No labels pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
GiteaMirror ninjasurge (Kaehlen Rog)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/awesome-cicd-security#38