From https://github.com/0xCardinal/actsense

actsense is a local, vendor-agnostic framework to deeply audit GitHub Actions workflows and their dependencies, with interactive dependency visualization and 30+ security checks.