r12habh/ActionScope

test: Validate action.yml input and output metadata about 3 hours ago

help wanted good first issue marketplace ci

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Document --max-policy-files in the CLI reference about 3 hours ago

documentation help wanted good first issue

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Add a GitHub Environments hardening guide about 3 hours ago

documentation help wanted good first issue security

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Add a complete GitHub Action inputs and outputs reference about 3 hours ago

documentation help wanted good first issue marketplace

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

good first issue: Add AI agent detector tests for Gemini, OpenCode, and Continue 2 months ago

enhancement help wanted good first issue security

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Add output formats reference page 2 months ago

documentation help wanted good first issue

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

good first issue: Add script injection tests for issue_comment and discussion events 2 months ago

enhancement help wanted good first issue security

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Add AI agent prompt injection detector guide 2 months ago

documentation help wanted good first issue security

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

good first issue: Add Docker action pinning edge-case tests 2 months ago

enhancement help wanted good first issue

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Record demo GIF and add it to the README 2 months ago

documentation help wanted

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

good first issue: Add docs dependency extra and MkDocs build instructions 2 months ago

documentation good first issue

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

good first issue: Add artifact poisoning test for dawidd6/action-download-artifact 2 months ago

enhancement help wanted good first issue security

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Add contributor guide for compromised action database entries 2 months ago

documentation help wanted good first issue security compromised-action

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Add delta reporting guide for --save-state and --load-state 2 months ago

documentation help wanted good first issue

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Add artifact poisoning detector guide 2 months ago

documentation help wanted good first issue security

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Add script injection detector guide 2 months ago

documentation help wanted good first issue security

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

docs: Add step-by-step tutorial for scanning your first repo 2 months ago

documentation good first issue

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

good first issue: Improve error messages when policy file not found 2 months ago

documentation good first issue

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

good first issue: Add iam:CreateLoginProfile to ALWAYS_CRITICAL set 2 months ago

enhancement good first issue

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

Expand AWS privilege escalation detector coverage 2 months ago

good first issue new-check security

r12habh/ActionScope

2

Map the AWS blast radius of GitHub Actions workflows. Detects compromised actions, OIDC misconfigurations, script injection, and privilege escalation paths.

Python

#aws#blast-radius#cicd#devsecops#github-actions#iam#oidc#privilege-escalation#sarif#security#static-analysis#supply-chain#terraform

Open Issues Need Help