GitHub Actions hardening

Access workflow security posture with verified identity.

ActionPin ties repository access, findings, policy changes, and remediation actions to authenticated users.