jdx/jactionlint

GitHub Actions linter

:octocat: Static checker for GitHub Actions workflow files

🌊 Interactive CLI tool to update GitHub Actions to latest versions with SHA pinning

Plumber detects CI/CD security issues in your GitHub workflows and gives you a score

CI/CD Security Analyzer

Static analysis for GitHub Actions (and more)

Orchestrate GitHub Actions Security

GitHub Attack Toolkit - Extreme Edition - A static analysis and exploit toolkit for GitHub Actions.

Reusable GitHub workflows used at Very Good Ventures 🦄