ciaudit.genexxis.com
Lint a GitHub Actions workflow: actions not pinned to a commit SHA, missing or write-all permissions, pull_request_target with PR head checkout, script injection via event fields in run, secrets on the command line, curl|bash, self-hosted runners, deprecated set-output.
- Category
- Other services
- Starting price
- $0.008
- Paid calls · 30 days
- 14
- Unique payers · 30 days
- 8
Paid endpoints
3 endpoints, sorted by usage. Prices are per request.
- POST/github-actions
Lint a GitHub Actions workflow: actions not pinned to a commit SHA, missing or write-all permissions, pull_request_target with PR head checkout, script injection via event fields in run, secrets on the command line, curl|bash, self-hosted runners, deprecated set-output.
$0.008Base6calls / 30d - POST/compose
Lint a docker-compose file: privileged, host network/pid/ipc, Docker socket mounts, SYS_ADMIN/ALL capabilities, unpinned images, database ports published on all interfaces, literal secrets, restart policy, memory limits.
$0.01Base4calls / 30d - POST/dockerfile
Lint a Dockerfile: base image pinning, root user, curl|sh, remote ADD, secrets in ENV/ARG, apt/pip/npm hygiene, chmod 777, EXPOSE 22, HEALTHCHECK, layer cache order. Returns findings with line, why, fix and a score.
$0.01Base4calls / 30d