Skip to content
mcp/harbor
VS Code

GitHub Actions Audit for VS Code

io.github.unbearabledev/github-actions-audit

GitHub Actions workflow security audit - 21 checks: pinning, permissions, secrets, injection.

client:VS Code transport:streamable-http

Install GitHub Actions Audit in VS Code

.vscode/mcp.json 

{
  "servers": {
    "github-actions-audit": {
      "type": "http",
      "url": "https://unbearable-dev--github-actions-audit.apify.actor/mcp"
    }
  }
}

Requires agent mode. MCP: Open User Configuration puts the same block in every workspace. VS Code docs

GitHub Actions Audit in other clients

GitHub Actions Audit MCP server