{"slug":"ci-workflow-audit-993d0681","name":"CI Workflow Audit","summary":"Audit a CI workflow for what it leaves movable or undeclared. Reports actions pinned to a tag rather than a commit - a tag can be moved by whoever owns the action, so the code a step runs can change without this file changing - missing permissions and timeouts, a job depending on one that is not declared, a pull_request_target trigger, and an expression interpolated straight into a shell command.","status":"live","indexable":true,"listed_since":"2026-10-25T17:51:55.602535Z","sources":[{"source":"x402_bazaar","external_id":"https://api.zfinia.com/x402/v1/ci-workflow-contract-audit","owner_address":"0x25e8245f07d5e4873987293dad666afbe56a9608","seen_at":"2026-10-26T22:03:45.169420Z","removed_at":null}],"endpoints":[{"url":"https://api.zfinia.com/x402/v1/ci-workflow-contract-audit","host":"api.zfinia.com","protocol":"x402","state":"live","last_probe_at":"2026-10-26T07:40:17.689494Z","last_ok_at":"2026-10-26T07:40:17.689494Z","tools_count":null,"tools_changed_at":null,"uptime_24h":1.0,"uptime_30d":1.0}],"also_listed_as":[{"slug":"api-zfinia-com-78023beb","name":"api.zfinia.com"}],"payment_options":[{"endpoint_url":"https://api.zfinia.com/x402/v1/ci-workflow-contract-audit","network":"eip155:8453","scheme":"exact","rail":"exact","asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","coin":"USDC","asset_label":"USD Coin","amount":"120000","pay_to":"0x25e8245f07d5e4873987293dad666afbe56a9608","observed_at":"2026-10-26T07:40:17.689494Z"}],"usage":{"source":"x402_bazaar","unique_payers_30d":1,"paid_calls_30d":1,"last_paid_at":"2026-10-04T08:02:44.497Z","reported_at":"2026-10-26T22:03:45.169420Z"},"assessment":{"method":"2026.10.1","checks":[{"id":"answers","state":"pass","reason":"Answered a check 16 hours ago."},{"id":"owner","state":"fail","reason":"No one has proven control of its domain or of the wallet it is paid at."},{"id":"track_record","state":"fail","reason":"Listed for 1 days; 30 are needed."},{"id":"real_customers","state":"fail","reason":"1 different wallets paid it in 30 days, as the x402 Bazaar reports (not yet counted by addrbook); 10 are needed."},{"id":"clean_scan","state":"not_applicable","reason":"Not an MCP server."}],"passed":1,"applicable":4,"contradicted":false,"computed_at":"2026-10-27T00:07:29.607717Z"},"identity":{"endpoint_domains":["zfinia.com"],"proven_domains":[],"proven_wallets":[],"namesakes":[],"namesake_count":0,"identity_checks":[],"wallet_attestations":[]},"replies":[],"customers":null,"scan":null,"notice":"Not affiliated with addrbook — claim or request removal."}