ActionScope/mkdocs.yml at main · r12habh/ActionScope · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
site_name: ActionScope
site_description: >-
  Map the AWS blast radius of GitHub Actions workflows. Detects compromised
  actions, OIDC trust misconfigurations, script injection, IAM privilege
  escalation paths, and unpinned actions.
site_url: https://r12habh.github.io/ActionScope/
site_author: Rishabh Singh
repo_name: r12habh/ActionScope
repo_url: https://github.com/r12habh/ActionScope
edit_uri: edit/main/docs/
copyright: Copyright &copy; 2026 Rishabh Singh — MIT licensed

theme:
  name: material
  palette:
    - media: "(prefers-color-scheme: light)"
      scheme: default
      primary: deep orange
      accent: deep orange
      toggle:
        icon: material/weather-night
        name: Switch to dark mode
    - media: "(prefers-color-scheme: dark)"
      scheme: slate
      primary: deep orange
      accent: deep orange
      toggle:
        icon: material/weather-sunny
        name: Switch to light mode
  features:
    - navigation.tabs
    - navigation.sections
    - navigation.expand
    - navigation.top
    - navigation.tracking
    - navigation.indexes
    - search.suggest
    - search.highlight
    - content.code.copy
    - content.action.edit
    - toc.integrate
  icon:
    repo: fontawesome/brands/github
    logo: material/shield-check

extra:
  social:
    - icon: fontawesome/brands/github
      link: https://github.com/r12habh/ActionScope
    - icon: fontawesome/brands/python
      link: https://pypi.org/project/actionscope/
  generator: false

markdown_extensions:
  - admonition
  - attr_list
  - def_list
  - footnotes
  - md_in_html
  - tables
  - toc:
      permalink: true
  - pymdownx.details
  - pymdownx.superfences
  - pymdownx.tabbed:
      alternate_style: true
  - pymdownx.tasklist:
      custom_checkbox: true
  - pymdownx.emoji:
      emoji_index: !!python/name:material.extensions.emoji.twemoji
      emoji_generator: !!python/name:material.extensions.emoji.to_svg

plugins:
  - search

# Internal docs that intentionally aren't published.
exclude_docs: |
  ai-code-review.md
  demo.md

nav:
  - Home: index.md
  - Getting Started:
      - Quick Start: getting-started.md
      - First Scan Tutorial: tutorials/first-scan.md
      - Output Formats: output-formats.md
      - Limitations and Calibration: limitations.md
      - Confidence-Aware CI Gating: ci-gating.md
      - Repository Risk Policy: config.md
      - FAQ: faq.md
      - CLI Reference: cli-reference.md
  - Detectors:
      - Compromised Actions: compromised-actions.md
      - OIDC Trust Policy: oidc-trust.md
      - GitHub Environments: github-environments.md
      - Script Injection: script-injection.md
      - AI Agent Prompt Injection: ai-agent-prompt-injection.md
      - Reusable Workflows: reusable-workflows.md
      - Correlated Exposure Paths: exposure-paths.md
      - SARIF and Code Scanning: sarif.md
  - Compromised Actions Database: compromised-actions-database.md
  - Research:
      - Corpus Scans: corpus.md
  - Operations:
      - AWS Verification Permissions: aws-verify-permissions.md
      - Release Runbook: release-runbook.md