ASF GitHub Actions Workflow Scanner

Setting up

pipenv install

Create a Read-Only GitHub token

Enter your GitHub token into the gha_scanner.config file. Optionally, copy the gha_scanner.config file somewhere else and pass it to scanner.py with -c/--config.

Starting

pipenv run python3 ./scanner.py

Logging

The policy scanner logs to logs/gha_scanner.log by default.