GitHub Actions AuditVerified🛡 No advisories
Provenancewhere it came from, and what was verified
Published to the official MCP registry by github.com/unbearabledev, which proved it owns this namespace.
🛡 Permissions & trustwhat this server can touch before you run it
About
GitHub Actions workflow security audit - 21 checks: pinning, permissions, secrets, injection.
Packages & transports
Computed from the server's own data, not a hidden formula. This measures how much you can depend on it, not how popular it is. Stars are shown separately, on purpose. How it's scored →
Raise this grade
up to +25 on qualityOwn this server? Here's exactly what to change, biggest wins first. Every number below is a fixed point value, so you can see what each edit is worth before you make it.
Push to the repo or cut a release. Activity within the last 30 days earns the full 45.
With no reviews this sits at a neutral 11. Reviews reporting it works push it toward the full 20.
Add an SPDX license (like MIT or Apache-2.0) to the repo so it's detected.
Already earned (3) ▾Already earned (3) ▴
These are structural checks, so the fixes are exact. See the full formula →
Add a badge to your README
[](https://socketcat.com/servers/io.github.UnbearableDev/github-actions-audit)Shows your live quality grade and links back here. It updates itself as the grade changes.
Reviews
Sign in to leave a reviewNo reviews yet. Be the first to say whether it worked.
{
"mcpServers": {
"github_actions_audit": {
"command": "npx",
"args": [
"-y",
"github-actions-audit"
]
}
}
}▶ Try itlive against unbearable-dev--github-actions-audit.apify.actor
This server has a hosted endpoint, so we can connect and list its actual tools right here. Nothing runs on your machine.