ActionScope
Version updated for https://github.com/r12habh/ActionScope to version v0.5.0.
- This action is used across all versions by 0 repositories.
Action Type
This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
Action Summary
ActionScope is an open-source tool that analyzes GitHub Actions workflows to identify AWS permissions and potential security risks. It automates the process of mapping the blast radius of CI/CD pipelines against AWS resources, providing clear insights into what actions and permissions are implied if a workflow is compromised. Key capabilities include detecting known-compromised actions, identifying OIDC trust policy misconfigurations, and monitoring for script injection or artifact poisoning. Users can run it locally to scan their repositories without requiring AWS credentials.
What’s Changed
ActionScope v0.5.0
Install
pip install actionscope==0.5.0
What’s New
See CHANGELOG.md for details.