GitHub Actions Audit

by io.github.UnbearableDev · security · mcp-server, official-registry

GitHub Actions workflow security audit - 21 checks: pinning, permissions, secrets, injection.

Source: https://github.com/UnbearableDev/github-actions-audit

Install

git clone https://github.com/UnbearableDev/github-actions-audit

Tags: mcp-server, official-registry

Source: mcp-registry

About security MCP servers and Claude skills

Security MCP servers let agents scan dependencies, audit logs, check for vulnerabilities, and enforce policy guardrails. Critical for any agent that touches production.

GitHub Actions Audit is one of hundreds of security entries indexed on Skiln. Browse the full security category or the complete directory of Claude skills, MCP servers, agents, commands, and hooks.

Related security MCPs and skills

  • Szamlazz.hu MCP by io.github.UnbearableDev

    Hungarian sole-trader invoicing via Szamlazz.hu - issue, query, PDFs, VAT-ceiling tracking.

  • Kubernetes Manifest Audit by io.github.UnbearableDev

    kube-linter audit for Kubernetes manifests — 63 checks: security, availability, RBAC, network.

  • IAC Audit Pack by io.github.UnbearableDev

    Four IaC audits in one call: Compose, Dockerfile, GitHub Actions, Kubernetes. 131 checks.

  • Hungarian Postcode Validator by io.github.UnbearableDev

    Hungarian postcode lookup + validation - 3,484 codes, sub-10ms lookups, bulk address endpoint.

  • Dockerfile Audit by io.github.UnbearableDev

    Hadolint-grade Dockerfile audit — 19 checks: secrets, privileges, supply chain, hygiene.

  • Docker Compose Audit by io.github.UnbearableDev

    Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.

  • PCBLT — Live Checks by com.pcblt

    Live DNS, email-auth and redirect checks, HTTP security headers, uptime history, PC hardware prices.

  • com.everlange/mcp by com.everlange

    Everlange: audit AEO on 67 criteria across 10 answer engines, apply fixes, prove the gain.

Frequently asked questions

How do I install GitHub Actions Audit?

Add the install command above to your Claude Code, Cursor, or Windsurf MCP configuration. Most servers register via npx, a local command, or a Docker image. Refer to the source repository for environment variables and credential requirements.

Which clients support GitHub Actions Audit?

Any MCP-compatible client works: Claude Desktop, Claude Code CLI, Cursor, Windsurf, Zed, and VS Code with the official MCP extension. OpenAI Codex and GitHub Copilot increasingly support MCP via adapter bridges.

Is GitHub Actions Audit free?

The server itself is typically open source. Any upstream service (API keys, paid tiers, hosted infrastructure) may have its own pricing. Check the source repository for details.