Issues

• bug: Steps inside parallel groups are not analyzed

  bugsecurity
  r12habh/ActionScope#154 · Filter by author r12habh opened on Oct 9, 2026 · v0.5.1 — Documentation & Reliability

• feat: Add a stable Python API and a versioned JSON report schema

  documentationenhancementv0.6.0
  r12habh/ActionScope#153 · Filter by author r12habh opened on Oct 9, 2026 · v0.6.0 — Research Readiness

• feat: Detect secret exfiltration patterns in workflow steps

  enhancementnew-checksecurityv0.6.0
  r12habh/ActionScope#152 · Filter by author r12habh opened on Oct 9, 2026 · v0.6.0 — Research Readiness

• feat: Support GitHub's actions.lock dependency lockfile

  enhancementsecurityv0.6.0
  r12habh/ActionScope#151 · Filter by author r12habh opened on Oct 9, 2026 · v0.6.0 — Research Readiness

• feat: Map OIDC identity reachability for jobs that can mint ID tokens

  enhancementsecurityv0.6.0
  r12habh/ActionScope#150 · Filter by author r12habh opened on Oct 9, 2026 · v0.6.0 — Research Readiness

• chore: Archive releases on Zenodo and add the DOI to CITATION.cff

  documentationrelease
  r12habh/ActionScope#146 · Filter by author r12habh opened on Oct 6, 2026 · JOSS Submission — December 2026

• test: Validate --aws-verify against sandbox IAM roles with known ground truth

  aws-verifyresearchv0.6.0
  r12habh/ActionScope#145 · Filter by author r12habh opened on Oct 6, 2026 · v0.6.0 — Research Readiness

• research: Measure detector precision and recall against zizmor and CodeQL on a labeled corpus

  researchv0.6.0
  r12habh/ActionScope#144 · Filter by author r12habh opened on Oct 6, 2026 · v0.6.0 — Research Readiness

• feat: Add a reproducible corpus scan mode for empirical studies

  enhancementresearchv0.6.0
  r12habh/ActionScope#143 · Filter by author r12habh opened on Oct 6, 2026 · v0.6.0 — Research Readiness

• docs: Add CloudFormation and SAM IAM evidence guide

  documentationgood first issuehelp wantedsecurity
  r12habh/ActionScope#134 · Filter by author r12habh opened on Sep 13, 2026 · v0.5.1 — Documentation & Reliability

• docs: Explain --max-policy-files directory exemptions

  documentationgood first issuehelp wanted
  r12habh/ActionScope#117 · Filter by author r12habh opened on Jul 27, 2026 · v0.5.1 — Documentation & Reliability

• docs: Add a complete GitHub Action inputs and outputs reference

  documentationgood first issuehelp wantedmarketplace
  r12habh/ActionScope#115 · Filter by author r12habh opened on Jul 27, 2026 · v0.5.1 — Documentation & Reliability

• research: Prepare ActionScope for December 2026 JOSS submission

  docsreleaseresearch
  r12habh/ActionScope#94 · Filter by author r12habh opened on Jun 11, 2026 · JOSS Submission — December 2026

• feat: Add a pre-commit hook

  enhancementhelp wantedv0.7.0
  r12habh/ActionScope#93 · Filter by author r12habh opened on Jun 11, 2026 · v0.7.0 — Adoption & Scale

• feat: Suggest least-privilege IAM policy for common workflow patterns

  aws-verifyenhancementfuturesecurity
  r12habh/ActionScope#90 · Filter by author r12habh opened on Jun 11, 2026

• docs: Add contributor guide for compromised action database entries

  compromised-actiondocumentationgood first issuehelp wantedsecurity
  r12habh/ActionScope#59 · Filter by author r12habh opened on May 25, 2026 · v0.5.1 — Documentation & Reliability

• docs: Add artifact poisoning detector guide

  documentationgood first issuehelp wantedsecurity
  r12habh/ActionScope#51 · Filter by author r12habh opened on May 25, 2026 · v0.5.1 — Documentation & Reliability

• feat: Historical risk tracking and trend reporting

  enhancementfuture
  r12habh/ActionScope#31 · Filter by author r12habh opened on May 22, 2026

• feat: VS Code extension for real-time workflow risk highlighting

  enhancementfuture
  r12habh/ActionScope#27 · Filter by author r12habh opened on May 22, 2026

• feat: Org-wide scanning mode (actionscope scan-org)

  enhancementv0.7.0
  r12habh/ActionScope#26 · Filter by author r12habh opened on May 22, 2026 · v0.7.0 — Adoption & Scale

• feat: Visual blast radius graph export (SVG/HTML)

  enhancementfuture
  r12habh/ActionScope#24 · Filter by author r12habh opened on May 22, 2026

• feat: Add Azure Federated Credential (OIDC) support

  enhancementfuture
  r12habh/ActionScope#22 · Filter by author r12habh opened on May 22, 2026

• feat: Add GCP Workload Identity Federation support

  enhancementfuture
  r12habh/ActionScope#21 · Filter by author r12habh opened on May 22, 2026