SSDF Attestation Audit for GitHub Actions — Licence

Free scope
  Audit the workflow file you have open and list every attestation gap with its SSDF practice ID and the CISA form section it sits under. is free for any use, personal or commercial, for as long as you keep the
  extension installed, and the online check at the product page is free without registration.

Paid scope
  Audit every workflow in the repository at once and export one dated evidence table mapped to all four attestation sections. is the paid part. It asks for a licence key issued at purchase (one seat, one key). The key is checked against the payment provider and
  cached locally for 30 days so it keeps working offline.

Redistribution
  You may not resell, re-host or bundle this extension or its rule set. The rule set and the
  engine are provided as-is; check results are advisory and do not constitute legal advice.

(c) ReadyStack — https://getreadystack.com
