Octoscan is a static vulnerability scanner for GitHub action workflows. - View it on GitHub