actionsec is an open-source CLI tool that scans GitHub Actions workflows for common security issues such as unpinned actions, script injection, and overly broad permissions. It is designed for DevOps engineers to improve CI/CD pipeline security with zero configuration and no dependencies.
actionsec is a Security & compliance platforms product. It focuses on detecting and preventing security vulnerabilities in GitHub Actions workflows. It is built as an open-source project for devops engineers. actionsec is open source under the MIT license. actionsec is available on the command line.
jjdoor builds and maintains actionsec, and the product first shipped in 2026. PulseGate's similarity index finds few close equivalents — actionsec occupies a relatively distinct niche. Key capabilities include security scanning, unpinned action detection, and script injection detection.
Latest indexed changes and source events
Other apps tracked under the same category.