- name
- github-actions-self-hosted-risk-audit
- description
- Audit GitHub Actions workflows that use self-hosted runners for untrusted trigger and credential-hardening risks.
- version
- 1.0.0
- metadata
- {"openclaw":{"requires":{"bins":["bash","python3"]}}}
GitHub Actions Self-Hosted Risk Audit
Use this skill to flag risky workflow patterns when jobs run on self-hosted GitHub Actions runners.
What this skill does
- Scans workflow YAML files (
.github/workflows/*.ymlby default) - Detects workflows that reference
self-hostedrunners - Flags high-risk trigger combinations (
pull_request_target,pull_request,issue_comment) - Flags broad/self-hosted-only runner selection (no extra routing labels)
- Flags workflows with write-capable permissions in self-hosted contexts
- Flags
actions/checkoutsteps that do not setpersist-credentials: false - Supports text/json output and CI fail gate
Inputs
Optional:
WORKFLOW_GLOB(default:.github/workflows/*.y*ml)TOP_N(default:20)OUTPUT_FORMAT(textorjson, default:text)WARN_SCORE(default:4)CRITICAL_SCORE(default:8)WORKFLOW_FILE_MATCH/WORKFLOW_FILE_EXCLUDE(regex, optional)FAIL_ON_CRITICAL(0or1, default:0)
Run
Text report:
WORKFLOW_GLOB='.github/workflows/*.yml' \
WARN_SCORE=4 \
CRITICAL_SCORE=8 \
bash skills/github-actions-self-hosted-risk-audit/scripts/self-hosted-risk-audit.shJSON output + fail gate:
WORKFLOW_GLOB='.github/workflows/*.y*ml' \
OUTPUT_FORMAT=json \
FAIL_ON_CRITICAL=1 \
bash skills/github-actions-self-hosted-risk-audit/scripts/self-hosted-risk-audit.shRun against bundled fixtures:
WORKFLOW_GLOB='skills/github-actions-self-hosted-risk-audit/fixtures/*.y*ml' \
bash skills/github-actions-self-hosted-risk-audit/scripts/self-hosted-risk-audit.shOutput contract
- Exit
0in reporting mode (default) - Exit
1whenFAIL_ON_CRITICAL=1and one or more workflows are critical - Text mode prints summary + top flagged workflows
- JSON mode prints summary + flagged workflows + critical workflows