{"exampleOnly":true,"paid":false,"chargedUSDC":"0","sampleWorkflow":"name: test\non: pull_request\npermissions: {contents: read}\njobs:\n  build:\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions/checkout@v4\n","sampleReport":{"ok":true,"sourceFile":"ci.yml","staticOnly":true,"workflowEvents":["pull_request"],"counts":{"high":0,"medium":1,"note":0},"findings":[{"severity":"medium","id":"ACTION_UNPINNED","title":"Third-party action uses a mutable ref","where":"jobs.build.steps[1].uses","description":"actions/checkout@v4 is not pinned to a 40-character immutable commit SHA.","recommendation":"Pin this action to a reviewed full commit SHA; keep a version comment for Dependabot/Renovate.","source":"https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions","line":8}],"findingsTruncated":false,"limitations":"Heuristic preflight only: false positives/negatives; not an audit, verified exploit, security certification, or review of runtime context.","source":"https://github.com/livastic-vm2-primary-20260911/apify-workflow-guard"},"paidEndpoint":"POST /v1/workflow-risk","priceUSDC":"0.20","network":"eip155:8453","confirmedIndependentPaidCustomers":0,"source":"https://github.com/livastic-vm2-primary-20260911/apify-workflow-guard","warning":"This is a publicly reproducible synthetic example. Purchase pays for hosted preflight on your own NONSECRET workflow, not security certification, runtime testing, unique IP or any prior external client order."}