WorkflowGuard GitHub Actions Security Analyzer
https://47-85-47-24.sslip.io/v1/github-actions-workflow-riskOverview
Deterministic GitHub Actions workflow YAML analysis for privileged trigger trust boundaries, script injection, GITHUB_TOKEN least privilege, immutable action pinning, self-hosted runner exposure, secret delegation, OIDC gates, and untrusted artifacts. It never accesses GitHub, checks out code, executes a workflow, or returns credential values.