GitHub Actions can do more than run a typical CI/CD pipeline. Check out how to use Actions to automate audit and compliance tasks, including auditing user permissions and demonstrating end-to-end traceability.
https://github.blog/2021-10-22-github-actions-for-security-compliance/