GitHub Actions Audit

Name: GitHub Actions Audit
Author: UnbearableDev

UnbearableDev

MCP server auditing .github/workflows/*.yml for supply-chain risks: script injection, leaked tokens, unpinned actions, broad permissions. Pay-per-event on Apify Store.

Setup

Choose your client, copy the config, then fill in any required environment variables.

Add to Cursor Add to VS Code

claude mcp add --transport http github-actions-audit https://unbearable-dev--github-actions-audit.apify.actor/mcp --header 'Authorization: <AUTHORIZATION>'

~/.codex/config.toml

[mcp_servers.github-actions-audit]
url = "https://unbearable-dev--github-actions-audit.apify.actor/mcp"
http_headers = { Authorization = "<AUTHORIZATION>" }

# codex mcp add github-actions-audit --url https://unbearable-dev--github-actions-audit.apify.actor/mcp

~/.cursor/mcp.json

{
  "mcpServers": {
    "github-actions-audit": {
      "url": "https://unbearable-dev--github-actions-audit.apify.actor/mcp",
      "headers": {
        "Authorization": "<AUTHORIZATION>"
      }
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "github-actions-audit": {
      "type": "http",
      "url": "https://unbearable-dev--github-actions-audit.apify.actor/mcp",
      "headers": {
        "Authorization": "<AUTHORIZATION>"
      }
    }
  }
}

~/.gemini/settings.json

{
  "mcpServers": {
    "github-actions-audit": {
      "httpUrl": "https://unbearable-dev--github-actions-audit.apify.actor/mcp",
      "headers": {
        "Authorization": "<AUTHORIZATION>"
      }
    }
  }
}

claude_desktop_config.json · Customize › Connectors › Add custom connector

{
  "mcpServers": {
    "github-actions-audit": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote",
        "https://unbearable-dev--github-actions-audit.apify.actor/mcp",
        "--header",
        "Authorization:<AUTHORIZATION>"
      ]
    }
  }
}

.trae/mcp.json

{
  "mcpServers": {
    "github-actions-audit": {
      "url": "https://unbearable-dev--github-actions-audit.apify.actor/mcp",
      "headers": {
        "Authorization": "<AUTHORIZATION>"
      }
    }
  }
}

Setup

Related