How do I install GitHub Actions Audit?

Copy the http config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.

Does GitHub Actions Audit need an API key?

No required environment variable is listed on this record.

What transport does GitHub Actions Audit use?

GitHub Actions Audit is reached over HTTP.

When was GitHub Actions Audit last checked?

Last checked 2026-11-09. GitHub Actions workflow security audit - 21 checks: pinning, permissions, secrets, injection.

GitHub Actions Audit MCP server

Power your agent

Add this server

The publisher's own URL. Not a PlugMCP endpoint.

Add to Cursor Add in Claude Add to VS Code Run on PlugMCP

Host a copy with our keys and logs.

Server URL

https://unbearable-dev--github-actions-audit.apify.actor/mcp

The Claude button above opens Claude with the name and URL filled in. You still confirm it there.

shClaude Code

1claude mcp add --transport http io.github.unbearabledev-github-actions-audit https://unbearable-dev--github-actions-audit.apify.actor/mcp

Run in a terminal.

jsonClaude Desktop

1{2  "mcpServers": {3    "io.github.unbearabledev-github-actions-audit": {4      "command": "npx",5      "args": [6        "-y",7        "mcp-remote",8        "https://unbearable-dev--github-actions-audit.apify.actor/mcp"9      ]10    }11  }12}

claude_desktop_config.json

Remote · HTTPPublisher installStep-by-step: add this in Claude

Remote URL or a command on your machine? How the two installs differ

Run on PlugMCP

Host a copy with our keys and logs.

A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.

Launch

Server facts

Remote

Transport: http
Version: 1.0.1
Last checked

Tools

No tool list yet. Remote servers get one after the first health check.

FAQ

Questions

GitHub Actions Security Audit

MCP server that audits .github/workflows/*.yml files for supply-chain risks. Catches script injection, leaked tokens, unpinned actions, broad permissions, and pull_request_target foot-guns — the patterns behind several 2024–2025 supply-chain incidents.

Built by Unbearable Labs. Pay-per-event — only billed when a tool is actually called.

Available on

Apify Actor Store — primary, metered usage (PPE)
MCPize — pending submission
MCP.so — pending submission
PulseMCP — pending submission
Smithery — pending submission
Glama — pending submission

Newsletter: Unbearable TechTips Weekly · All Actors: github.com/UnbearableDev

What it does

Point any MCP-capable client (Claude Desktop, Cursor, n8n, Make, Zapier, custom agents) at this server, hand it a workflow YAML, and get back structured findings with:

Severity — critical / high / medium / low / info
Affected job and step — exact location of the problem
Description — why it matters, with the actual attack vector
Remediation — what to do about it
Fix snippet — YAML you can paste directly

Tools

Tool	Purpose
`audit_workflow(workflow_yaml? \| workflow_url?, min_severity='low')`	Run all checks
`check_secrets(...)`	Secret-leakage paths only
`check_permissions(...)`	`GITHUB_TOKEN` scope issues only
`check_action_pinning(...)`	Action version-pinning only
`check_runner_security(...)`	Self-hosted runner + script injection
`check_workflow_config(...)`	Timeout / config hygiene
`check_supply_chain_advanced(...)`	TeamPCP-class supply-chain patterns (GHA-201..208)
`list_checks(category?)`	Browse the catalog

Provide exactly one of workflow_yaml (paste the content) or workflow_url (HTTPS URL — typically a GitHub raw URL to a specific workflow file).

Check catalog (v2: 21 checks)

ID	Category	Severity	Title
GHA-001	secrets	high	Secret interpolated directly into `run:` script
GHA-002	secrets	high	Secret printed via echo / set-output
GHA-003	secrets	medium	Secret used in `if:` condition
GHA-004	secrets	high	Hardcoded credential pattern in `env:`
GHA-010	permissions	high	`permissions: write-all` granted
GHA-011	permissions	medium	No top-level `permissions:` (inherits broad default)
GHA-013	permissions	high	`pull_request_target` + checkout PR head = PWNing pattern
GHA-020	action_pinning	high	Third-party action pinned to mutable tag
GHA-021	action_pinning	high	Third-party action pinned to mutable branch
GHA-022	action_pinning	medium	First-party action not SHA-pinned
GHA-030	runner_security	medium	Self-hosted runner used on `pull_request` from forks
GHA-032	runner_security	high	Script injection via untrusted `github.event.*` interpolation
GHA-040	workflow_config	low	No `timeout-minutes` on job
GHA-201	supply_chain_advanced	high	Action pinned to unpinned branch ref (TeamPCP-class: @main/@master)
GHA-202	supply_chain_advanced	high	Action pinned to mutable tag — SHA pin recommended
GHA-203	supply_chain_advanced	critical	`pull_request_target` + checkout of PR head SHA/ref (codecov/tj-actions exploitation path)

Pricing

Event	USD
Any audit / check_* tool call	$0.02
`list_checks` discovery	$0.005

Connecting from Claude Desktop

{
  "mcpServers": {
    "gha-audit": {
      "transport": "streamable-http",
      "url": "https://YOUR-ACTOR-URL.apify.actor/mcp"
    }
  }
}

Sibling MCPs from Unbearable Labs

docker-compose-audit — docker-compose.yml security audit
dockerfile-audit — Dockerfile security & quality
hu-postcode-validator — Hungarian postcode lookup

What's NOT covered (yet)

Reusable workflow auditing (multi-file resolution)
CodeQL-grade dataflow tracking
Marketplace-listed action reputation scoring

Source / contact

Source: github.com/UnbearableDev/github-actions-audit. Issues + ideas: [email protected].

📬 Built by Noel @ Unbearable Labs. More MCP servers + audit tips in the newsletter: https://unbearabletechtips.beehiiv.com

Add this server

Host a copy with our keys and logs.

Server facts

Tools

Questions

How do I install GitHub Actions Audit?

Does GitHub Actions Audit need an API key?

What transport does GitHub Actions Audit use?

When was GitHub Actions Audit last checked?

Documentation

GitHub Actions Security Audit

Available on

What it does

Tools

Check catalog (v2: 21 checks)

Pricing

Connecting from Claude Desktop

Sibling MCPs from Unbearable Labs

What's NOT covered (yet)

Source / contact