funcan/gh-action-lint
Lint GitHub Actions workflows for unpinned actions, script injection, and overly broad permissions
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| recursive | Also check actions used by the repo's actions (requires github-token) | no | false |
| disable-check | Comma-separated list of checks to skip (pins, injections, permissions, pull-request-target) | no | "" |
| quiet | Suppress lint output; exit 0 for clean, 1 for violations | no | false |
| github-token | GitHub token for API requests. Required for --recursive. Defaults to the built-in token. | no | "" |
Outputs
no outputs