Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts

As part of their research on GitHub OIDC link to AWS & GCP, Rezonate Labs has created a scanning script. This script, released to the public, enables organizations to scan their accounts & projects identifying vulnerabilities in their IAM roles & service accounts.

There are 2 scripts in this repository, both written in Python 3.11. You should run them as an authenticated user and have the following dependencies installed:

GCP: gcloud cli, which can be downloaded from here - https://cloud.google.com/sdk/docs/install

AWS: boto3 python library (which can be installed by executing: pip install boto3)

GCP Below is example for the tool execution on GCP Project

AWS Below is example for the tool execution in the context of AWS account