ActionScope

Version updated for https://github.com/r12habh/ActionScope to version v0.4.0.

  • This action is used across all versions by 0 repositories.

Action Type

This is a Composite action.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

ActionScope is a GitHub Action that scans your CI/CD workflows to identify and report potential security risks in AWS permissions. It provides plain-English explanations of what your workflows can do if compromised, including actions like role escalation, privilege escalation, and data exfiltration. The action also detects known-compromised actions, OIDC trust policy misconfigurations, script injection, artifact poisoning, AI agent prompt injection surfaces, unpinned actions with SHA resolution, local recursion in reusable workflows, and correlated exposure paths.

What’s Changed

ActionScope v0.4.0

Install

pip install actionscope==0.4.0

What’s New

See CHANGELOG.md for details.