electricapp/hasp

Paranoid security scanner + sandboxed step runner for GitHub Actions. Verifies pins, audits workflows, runs steps in a kernel sandbox where secrets are capabilities.

2 best points · 1 comments · 1 Hacker News post · 8 GitHub stars · View on GitHub

Hacker News discussions

• hasp: A paranoid scanner and kernel-sandboxed step runner for GitHub Actions (2 points, 1 comments, by electricapps, 2026-04-14)