Who should use gha-audit?

gha-audit is an open-source project built for developers.

Yes — gha-audit is open source under the MIT license and free to use.

What platforms does gha-audit run on?

gha-audit runs on the command line.

Is gha-audit still active?

The GitHub repository shows 1 commit in the last 90 days.

What are alternatives to gha-audit?

Similar projects tracked by PulseGate include gh-audit, actionaudit, and actionsec.

Who develops gha-audit?

gha-audit is developed by Hiro-012.

When did gha-audit launch?

gha-audit first shipped in 2026.

Back to the index

gha-audit

Name: gha-audit
Author: Hiro-012

PyPIInfrastructure

gha-audit is a command-line tool that scans GitHub Actions workflow files for common security issues including unpinned actions, pwn requests, script injection, and overly broad permissions. It helps developers and security teams identify and remediate supply-chain vulnerabilities in CI/CD pipelines. Built as a Python package with an MIT license, it is intended for integration into development and security workflows.

Open SourceMITCLI

Visit PyPI

Overview

4 features

gha-audit is an Other dev tools project. Manually reviewing GitHub Actions workflows for supply-chain security issues and misconfigurations. gha-audit is an open-source project aimed at developers. gha-audit is open source under the MIT license. It runs on the command line.

Hiro-012 builds and maintains gha-audit, and it first shipped in 2026. The project is developed in the open on GitHub with 1 commit in the last 90 days. Key capabilities include Static Analysis, Security Audit, and Workflow Scanning.

Summary written by a language model from the project’s public pages.

Static Analysis
Security Audit
Workflow Scanning
Misconfiguration Detection

Built with & integrations

Runs on

CLI

Trust & compliance

License

MIT

Verified signals

HTTPSOpen Source GitHubActive maintenance

Indexing history

What PulseGate has recorded for this listing

Indexed4 Aug · 07:11 UTC
gha-audit verified against its public source
Source: PulseGate · Open

Frequently asked questions about gha-audit

What is gha-audit?: Manually reviewing GitHub Actions workflows for supply-chain security issues and misconfigurations. It is catalogued under Other dev tools on PulseGate.
Who should use gha-audit?: gha-audit is an open-source project built for developers.
Is gha-audit free?: Yes — gha-audit is open source under the MIT license and free to use.
What platforms does gha-audit run on?: gha-audit runs on the command line.
Is gha-audit still active?: The GitHub repository shows 1 commit in the last 90 days.
What are alternatives to gha-audit?: Similar projects tracked by PulseGate include gh-audit, actionaudit, and actionsec.gh-audit actionaudit actionsec
Who develops gha-audit?: gha-audit is developed by Hiro-012.
When did gha-audit launch?: gha-audit first shipped in 2026.

At a glance

Platforms: Cli
Languages: English
Open source: Yes (GitHub)
License: MIT
First seen: 4 Aug 2026
Built for: developers
Model: Open source
Solves: Manually reviewing GitHub Actions workflows for supply-chain security issues and misconfigurations.

Registered as

GitHub: Hiro-012/gha-audit
PyPI: gha-audit

Developer

Hiro-012

Solo developer

GitHub

Open source

View on GitHub

Stars: 0
Forks: 0
Open issues: 0
Last commit: 4 Aug 2026
Commits 90d: 1
Contributors: 1
Authorship: Solo
Default branch: main

Live coverage

Identity confidence: Low · 64
Indexed: 4 Aug 2026
Lifecycle: Alive
First seen: Aug 2026
Last seen: 4 Aug 2026

Identity audit (13)

Slug: gha-audit-pypi-org
Lifecycle state recorded: 4 Aug 2026
Verification state: Indexed for public listing
Listing state: Listed: yes
Index status: Included in index
Latest evidence snapshot: 4 Aug 2026
Timeline basis: Indexed-at chronology (no inferred launch/funding milestones).
Name from: Written by a language model from the project's public pages.
Category from: Assigned by a language model.
Summary from: Written by a language model from public pages.
Languages from: Detected by a language model from page content.
Last updated: 4 Aug 2026
Canonical URL: https://pypi.org/project/gha-audit

Ship this? Send a correction — no account, and you get a link to follow it.

Similar apps

Closest matches by what these projects do