ollieb89/Workflow Guardian
Advanced linter and security validator for GitHub Actions workflow files
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| github-token | GitHub token used to post PR comments and list changed files. | no | ${{ github.token }} |
| check-undefined-actions | Detect action references with no version pin, floating branch refs (e.g. @main), and recommend SHA pinning. | no | true |
| check-path-filters | Catch common path/branch filter mistakes: mutually exclusive pairs (paths + paths-ignore), empty filter arrays, and invalid glob patterns. | no | true |
| check-matrix-strategy | Validate matrix strategy syntax: empty dimension arrays, wrong types for fail-fast / max-parallel, and misplaced include/exclude. | no | true |
| check-deprecated | Flag deprecated workflow commands (::set-env::, ::set-output::, etc.), outdated action versions, and end-of-life Node runners. | no | true |
| check-security | Detect script-injection vulnerabilities (untrusted inputs interpolated into run: scripts) and dangerous pull_request_target patterns. | no | true |
Outputs
| name | description |
|---|---|
| errors | Number of error-severity findings. |
| warnings | Number of warning-severity findings. |
| infos | Number of info-severity findings. |