GitHub Token Abuse Detection Suite
8.3
Monitors GitHub repositories for suspicious workflow activity, specifically targeting the 'sync-check' pattern used in the Gheist campaign to detect and prevent unauthorized code injections and data exfiltration. Integrates with CI/CD pipelines to provide real-time security alerts.
280h
mvp estimate
8.3
viability grade
2
views
technology stack
Rust
Difficult
inspired by
Hacker News - Gheist campaign plants secret-dumping workflows using stolen tokens