Here is one such tool for GitHub Actions: https://github.com/step-security/harden-runner https://github.com/step-security/harden-runner. It would have detected

Here is one such tool for GitHub Actions: https://github.com/step-security/harden-runner https://github.com/step-security/harden-runner. It would have detected and blocked the call to pastebin.com in this scenario. I am the maintainer of this tool.