ciaudit.genexxis.com
ciaudit.genexxis.com
Lint a GitHub Actions workflow: actions not pinned to a commit SHA, missing or write-all permissions, pull_request_target with PR head checkout, script injection via event fields in run, secrets on the command line, curl|bash, self-hosted runners, deprecated set-output.
- Category
- Service
- Networks
- Base
- Starting price
- $0.008
- Paid calls, 30 days
- 12
Paid endpoints
3 endpoints, sorted by usage. Prices are per request.
| Endpoint | Price | Network | Facilitator | Calls / 30d |
|---|---|---|---|---|
POST/compose Lint a docker-compose file: privileged, host network/pid/ipc, Docker socket mounts, SYS_ADMIN/ALL capabilities, unpinned images, database ports published on all interfaces, literal secrets, restart policy, memory limits. | $0.01 | Base | Coinbase CDP | 4 |
POST/dockerfile Lint a Dockerfile: base image pinning, root user, curl|sh, remote ADD, secrets in ENV/ARG, apt/pip/npm hygiene, chmod 777, EXPOSE 22, HEALTHCHECK, layer cache order. Returns findings with line, why, fix and a score. | $0.01 | Base | Coinbase CDP | 4 |
POST/github-actions Lint a GitHub Actions workflow: actions not pinned to a commit SHA, missing or write-all permissions, pull_request_target with PR head checkout, script injection via event fields in run, secrets on the command line, curl|bash, self-hosted runners, deprecated set-output. | $0.008 | Base | Coinbase CDP | 4 |
Is this your project? Suggest an edit.