ghasec

Open-source scanner that catches security risks in GitHub Actions workflow files.

Desktopfreeglobal

ghasec is a free, open-source scanner that automatically checks a repository's GitHub Actions workflows for security risks, usable locally or as a GitHub Action in CI. It's aimed at developers and security teams who want to catch workflow misconfigurations before they can be exploited.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of ghasec - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim ghasec to unlock →

Something wrong with this listing — dead link, not a real product, wrong info?

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether ghasec (or something else) actually fits.

Try a problem