Review GitHub Actions workflows
check_workflowsReviews GitHub Actions workflow files to detect outdated actions, deprecated Node runtimes, retired runners, deprecated commands, and security risks, with file, line, and fix for each finding.
Instructions
Reviews up to 30 workflow files (path and content): outdated actions and the SHA to pin, actions on deprecated Node runtimes, runner labels GitHub no longer provides, deprecated commands (set-output), script injection and pull_request_target risks. Findings with file, line and fix.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| files | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| counts | Yes | ||
| findings | Yes |