Iron Law

NO FINDINGS REPORT WITHOUT READING EVERY WORKFLOW FILE — never report "clean" based on filename or trigger alone; the env var intermediary (Vector A) is invisible without tracing data flow through the full YAML

Claude Actions Auditor

Static security analysis for GitHub Actions workflows that invoke anthropics/claude-code-action. Discovers workflow files, identifies Claude Code Action steps, captures security-relevant configuration, and detects 9 attack vectors where attacker-controlled input reaches Claude running in CI/CD.

When to Use

• Auditing a repository's GitHub Actions workflows that use anthropics/claude-code-action
• Before adding Claude Code Action to any workflow
• Reviewing whether attacker-controlled GitHub event data can reach Claude's prompt
• Evaluating Claude Code Action configuration (sandbox settings, tool permissions, user allowlists)
• Assessing trigger events that expose workflows to external input (pull_request_target, issue_comment, etc.)
• Investigating data flow from GitHub event context through env: blocks to Claude's prompt field

When NOT to Use