audit_workflow
Run the full security audit against a GitHub Actions workflow.
Provide exactly one of `workflow_content` (paste the YAML content) or
`workflow_url` (HTTPS URL — e.g. a GitHub raw URL to a single
`.github/workflows/*.yml` file). Returns findings with severity,
affected job/step, remediation text, and a YAML fix snippet.
check_secrets
Run only the secrets checks against a workflow.
Args: workflow_content (primary), workflow_yaml (deprecated alias), workflow_url, min_severity (default 'low').
check_permissions
Run only the permissions checks against a workflow.
Args: workflow_content (primary), workflow_yaml (deprecated alias), workflow_url, min_severity (default 'low').
check_action_pinning
Run only the action_pinning checks against a workflow.
Args: workflow_content (primary), workflow_yaml (deprecated alias), workflow_url, min_severity (default 'low').
check_runner_security
Run only the runner_security checks against a workflow.
Args: workflow_content (primary), workflow_yaml (deprecated alias), workflow_url, min_severity (default 'low').
check_workflow_config
Run only the workflow_config checks against a workflow.
Args: workflow_content (primary), workflow_yaml (deprecated alias), workflow_url, min_severity (default 'low').