← Back to match
Actions Up!
Interactive CLI to scan, update, and SHA-pin GitHub Actions across a repository's workflows.
Desktopfreeglobal
An interactive desktop CLI that scans workflow and composite-action YAML across a repository to find referenced GitHub Actions and check for newer releases. It helps reduce supply-chain risk by interactively updating references to exact commit SHAs (or preserving tags when chosen) for more reproducible CI, and it detects reusable workflow calls at the job level. Intended for developers and teams maintaining GitHub Actions security; open-source under the MIT license and supports self-hosting.
Categories
security toolsDevOps tools

