github-actions-validator

Lint and validate GitHub Actions workflows with actionlint and act.

7|3|Updated May 4, 2026
One-click install
npx skills add https://github.com/nopperabbo/codebuddy2api --skill github-actions-validator-nopperabbo
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: github-actions-validator
Source: https://github.com/nopperabbo/codebuddy2api/tree/main/opencode-config/skills/github-actions-validator
Command: npx skills add https://github.com/nopperabbo/codebuddy2api --skill github-actions-validator-nopperabbo

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

GitHub Actions workflows are often brittle and hard to validate locally; this Skill provides a robust local validation workflow that lint checks, audits, and guides fixes to improve reliability.

Core Features & Use Cases

  • Static analysis of workflows with actionlint
  • Local execution testing with act (Docker required)
  • Security and version compliance checks with actionable remediation guidance
  • Guidance for both private and public actions and diverse runner configurations

Quick Start

Run the validator against a workflow file to verify syntax, security, and action usage locally.

Frequently Asked Questions about github-actions-validator

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate and lint GitHub Actions workflows locally?

You can validate GitHub Actions workflows locally by running this Skill to lint files under .github/workflows. It performs static analysis using actionlint, checking syntax and action usages to catch errors before pushing commits.

Can I test GitHub Actions workflows locally with act?

Yes, this Skill supports local execution testing with act. It uses Docker to run your GitHub Actions workflows locally, letting you test diverse runner configurations and verify pipeline behavior before committing changes.

Does this validator check for security issues in public and custom actions?

Yes, this validator performs security and version compliance checks on both public and custom actions. It enforces best practices by providing actionable remediation guidance for vulnerabilities and outdated versions in your CI pipelines.

What is the best way to check GitHub Actions syntax and policy compliance before pushing?

The best way to check GitHub Actions syntax and policy compliance before pushing is to run a local validator. This Skill applies actionlint static analysis and policy checks to your workflows, ensuring version compliance and security standards are met.

Do I need Docker to run local execution testing for GitHub Actions workflows?

Yes, Docker is required to run local execution testing for GitHub Actions workflows. This Skill relies on nektos/act, which uses Docker containers to simulate runner environments and execute your CI pipelines locally for testing.