Api Endpoint

cicd-scan

Static security scan of a CI/CD pipeline config: GitHub Actions, GitLab CI or CircleCI. Detects unpinned actions / images / orbs, template and environment injection, dangerous triggers, over-broad workflow-token permissions, secrets leaked to logs, cache poisoning and more. Returns a verdict (pass, caution, block), a 0-100 risk score and per-finding rule, severity, object, location and a concrete fix hint. Security indicators, not a guarantee.

Open interactive test console

Offering

Provider: payai.agentstools.dev
Method: POST
Offering type: Api Endpoint
Transport type: http
Category: Security
Delivery: Not provided
Pricing model: Not provided
x402 version: 2

Endpoint context

URL: https://payai.agentstools.dev/ci/scan
MIME type: application/json
First seen: 2026-10-16T02:01:07.550Z
Last seen: 2026-10-27T23:34:04.303Z
Tags: cicd, github-actions, gitlab, circleci, Security

Website

Payment pricing

x402 payment terms are the authoritative price for calling this endpoint.

Payment option 1: 0.02 USDC
Atomic price: 20000 · Network: solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp · Asset: USDC · Scheme: exact

Raw x402 terms

[
  {
    "scheme": "exact",
    "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
    "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
    "amount": "20000",
    "payTo": "AytHnvc6bZx1ALTy7b5Px7hcavoSYszG9aeKvDcZ8R1u"
  }
]

Observed health

Status: Reachable
Latest latency: 380 ms
Average latency: 950 ms
HTTP status: 405
Last checked: 2026-11-04T20:32:53.490Z
Reachability: 100% over 9 checks

Latency is measured to the first response headers. A reachable result does not verify response accuracy or merchant identity.

Input schema

{
  "body": {
    "format": "github-actions",
    "content": "name: ci\non: pull_request_target\njobs:\n  build:\n    runs-on: ubuntu-latest\n    steps:\n    - uses: actions/checkout@v4\n      with:\n        ref: ${{ github.event.pull_request.head.ref }}\n    - run: echo \"${{ github.event.issue.title }}\"\n"
  },
  "type": "http",
  "method": "POST",
  "bodyType": "json"
}

Output schema

{
  "type": "object",
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "required": [
    "input"
  ],
  "properties": {
    "input": {
      "type": "object",
      "required": [
        "type",
        "method",
        "bodyType",
        "body"
      ],
      "properties": {
        "body": {
          "required": [
            "content"
          ],
          "properties": {
            "format": {
              "enum": [
                "auto",
                "github-actions",
                "gitlab-ci",
                "circleci"
              ],
              "type": "string",
              "description": "CI system, or auto to detect from the content"
            },
            "content": {
              "type": "string",
              "description": "The CI/CD config text to scan (workflow file)"
            }
          }
        },
        "type": {
          "type": "string",
          "const": "http"
        },
        "method": {
          "enum": [
            "POST",
            "PUT",
            "PATCH"
          ],
          "type": "string"
        },
        "bodyType": {
          "enum": [
            "json",
            "form-data",
            "text"
          ],
          "type": "string"
        }
      },
      "additionalProperties": false
    },
    "output": {
      "type": "object",
      "required": [
        "type"
      ],
      "properties": {
        "type": {
          "type": "string"
        },
        "example": {
          "type": "object"
        }
      }
    }
  }
}