trustfix 0.1.1

OIDC trust gap scanner for AWS IAM and GitHub Actions

TrustFix

OIDC trust gap scanner for AWS IAM and GitHub Actions. Detects misconfigurations in OIDC trust policies and automatically fixes them via AI-generated Terraform pull requests.

Quick Start

Free GitHub Action: https://github.com/marketplace/actions/trustfix-oidc-security-scanner

Full dashboard + AI remediation: https://trustfix.dev

What It Detects

• Missing sub condition (any repo in org can assume your production role)
• Overly broad StringLike patterns in trust policies
• StringLike where StringEquals should be used
• Missing aud claim validation
• Wildcard Principal: "*" in IAM trust policies
• Unused IAM roles (90+ day inactivity)
• 6 types of GitHub Actions workflow misconfigurations

How It Works

1. Install free GitHub Action → scans every PR for OIDC misconfigs
2. Connect AWS account → maps every IAM role to every workflow that can assume it
3. Click "Generate Fix PR" → Claude AI generates precise Terraform rewrite
4. Review and merge → finding closes automatically

Pricing

Detection: Free forever AI Fix PRs: $499/month (Pro), $799/month (Team)