Build a GitHub Actions Security MCP Server for Agent-Safe CI/CD
After Google deleted three ADK workflows (Aug 4, 2026) over an agent-to-agent privilege boundary failure in CI/CD, agent-safe pipelines are the security story of the summer. This guide builds gh-actions-sec, a FastMCP TypeScript server that gives agents read-only visibility into GitHub Actions posture: workflow permissions, secret exposure, action allowlists, and run logs — so a CI/CD agent can audit and harden pipelines without ever holding write credentials.