GitHub Actions Permission Auditor
Pricing
from $4.90 / 1,000 page auditeds
Audit GitHub Actions workflow YAML files for token permission scope, risky triggers, third-party action pinning, secret usage patterns, OIDC configuration, and workflow-level permission hardening.
You can access the GitHub Actions Permission Auditor programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in API & Integrations in Apify Console.
1from apify_client import ApifyClient2
3# Initialize the ApifyClient with your Apify API token4# Replace '<YOUR_API_TOKEN>' with your token.5client = ApifyClient("<YOUR_API_TOKEN>")6
7# Prepare the Actor input8run_input = {}9
10# Run the Actor and wait for it to finish11run = client.actor("junipr/github-actions-permission-auditor").call(run_input=run_input)12
13# Fetch and print Actor results from the run's dataset (if there are any)14print(f"💾 Check your data here: https://console.apify.com/storage/datasets/{run.default_dataset_id}")15for item in client.dataset(run.default_dataset_id).iterate_items():16 print(item)17
18# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-startThe Apify API client for Python is the official library that allows you to use GitHub Actions Permission Auditor API in Python, providing convenience functions and automatic retries on errors.
Install the apify-client
$pip install apify-clientOther API clients include: