Below you will find pages that utilize the taxonomy term “Gamesapeca”
August 22, 2026
GHA OIDC Security Auditor
Version updated for https://github.com/gamesapeca/gha-oidc-auditor to version v0.1.0.
This action is used across all versions by ? repositories. Action Type This is a Docker action.
Go to the GitHub Marketplace to find the latest changes.
Action Summary This GitHub Action, gha-oidc-auditor, analyzes GitHub Actions workflows for vulnerabilities related to OpenID Connect (OIDC) authentication, including privilege leaks, injection sinks, unpinned dependencies, and insecure trigger combinations. It provides a deterministic static analysis tool with context-aware evaluation capabilities, offensive exploit chain synthesis, and automated least-privilege policy generation for AWS, GCP, Azure, HashiCorp Vault, and Kubernetes environments.