Skip to content

project

ghast

Taint-analysis scanner for GitHub Actions workflows that follows attacker-controlled inputs such as issue titles and branch names through jobs to the points where they are interpreted.

Current clusters