GitHub Actions Audit MCP Server

io.github.UnbearableDev/github-actions-audit

What is the GitHub Actions Audit MCP server?

GitHub Actions workflow security audit - 21 checks: pinning, permissions, secrets, injection.

Copy-paste configuration for popular MCP clients.

transport: http

Config generated by PluginBench — verify against the source before use.

Environment / auth

Authorization
required
secret
Apify API token. Format: 'Bearer <YOUR_APIFY_TOKEN>'. Get yours at https://console.apify.com/account/integrations

~/.cursor/mcp.json

{
  "mcpServers": {
    "github-actions-audit": {
      "url": "https://unbearable-dev--github-actions-audit.apify.actor/mcp"
    }
  }
}

Active

Hungarian postcode lookup + validation - 3,484 codes, sub-10ms lookups, bulk address endpoint.

Python

Active

Four IaC audits in one call: Compose, Dockerfile, GitHub Actions, Kubernetes. 131 checks.

Python

Active

kube-linter audit for Kubernetes manifests — 63 checks: security, availability, RBAC, network.

Python

Active

Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.

Python

Active

Compiler-precise code property graph for C, Python, and TypeScript, navigable over MCP.

Python

AGPL-3.0

Active

AI-native process classification. 2436 processes + 3284 KPIs from APQC, ITIL, SCOR.

Python

MIT