gha-security-review - GitHub Actions Security Review
Find exploitable vulnerabilities in GitHub Actions workflows.
Tags
Updated: 2026-05-09Capabilities
Typical Inputs
Typical Outputs
What this skill does
- review workflow files
- identify triggers
- check expressions
- validate attack paths
- report vulnerabilities
Inputs
- workflow files
- configuration files
- reference documents
Outputs
- vulnerability report
- security findings
- verified workflows
Requirements
- workflow file access
- configuration file access