github-actions-validator

GitHub Actions workflow validation catches syntax issues, runner label mistakes, and expression problems before CI by running static analysis and local execution checks on .github/workflows/*.yml files to prevent build failures.

Actionlint checks GitHub Actions workflows for syntax errors, invalid runner labels, expression problems, and insecure patterns like script injection, mapping each error to reference sections for precise workflow remediation.

Local testing of GitHub Actions workflows uses act for execution simulation and actionlint for static linting, validating workflow behavior and detecting security risks locally without triggering remote CI runs.

Action version verification checks GitHub workflow references against a maintained list, flagging outdated versions for updates and assigning UNVERIFIED status to unknown versions for offline handling and security auditing.

GitHub Actions workflows fail security audits when static analysis detects risky patterns like script injection or insecure usage, triggering error mapping to reference sections and minimal-quote fixes followed by mandatory post-fix reruns.

Local GitHub Actions testing cannot fully replicate remote CI environments and returns UNVERIFIED status for action versions not on the maintained list, requiring manual review of unmapped errors and offline reference section handling.