ActionPin — a GitHub Actions hardening checker to avoid Bitwarden CLI compromise.

ActionPin — a GitHub Actions hardening checker that flags unpinned third-party actions, overbroad workflow permissions, install scripts that touch secrets, and agent-triggered jobs that can reach production credentials after today's Bitwarden CLI compromise.