GitHub Actions Audit
GitHub Actions workflow security audit - 21 checks: pinning, permissions, secrets, injection.
likely compatible
Declares API key header (Authorization); use Copilot Studio 'API key' → Header.
Rule R2b · what this means · Not tested in Copilot Studio.
| Registry name | io.github.UnbearableDev/github-actions-audit |
| Endpoint used for verdict | https://unbearable-dev--github-actions-audit.apify.actor/mcp |
| Transports | streamable-http |
| Auth (Copilot Studio setting) | API key (header) |
| Last endpoint check | 2026-10-20T18:14:10Z · HTTP 401 |
| GitHub | UnbearableDev/github-actions-audit |
| Version | 1.0.1 |
| Registry updated | 2026-06-10 |
Track changes like this weekly. New Copilot-ready MCP servers, breakages and auth changes, in one short email.
Is this wrong or out of date? Email us. Data built 2026-10-20.