Raven

It provides Risk Analysis and Vulnerability Enumeration for CI/CD. It is a powerful security tool designed to perform massive scans for GitHub Actions CI workflows and digest the discovered data into a Neo4j database.