Skip to content
Louis Wright

Open source / Sentinel / workflow-sentinel

workflow-sentinel

Harden GitHub Actions: flags unpinned actions, broad or missing permissions, pull_request_target pwn requests, script injection, leaked secrets, persisted credentials, se

On npm
$ npm install workflow-sentinel
README rendered from GitHub at build (Shiki) —