skaldlab/muninn

CI/CD Security Analyzer

Plumber detects CI/CD security issues in your GitHub workflows and gives you a score

Static analysis for GitHub Actions (and more)

Runtime Security Solution for your CI/CD Pipeline

CI-Friendly static linter with autofix, SAST, semantic analysis for GitHub Actions

Microsoft Security DevOps for GitHub Actions.

A multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.

poutine, a supply chain vulnerability scanner for build pipelines

Scans your Github Actions for security issues