github-actions-validator

Validate GitHub Actions workflows with actionlint and act.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/tylern91/dotfiles --skill github-actions-validator-tylern91
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: github-actions-validator
Source: https://github.com/tylern91/dotfiles/tree/main/claude/.claude/skills/github-actions-validator
Command: npx skills add https://github.com/tylern91/dotfiles --skill github-actions-validator-tylern91

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Validate and test GitHub Actions workflows using actionlint (static analysis) and act (local execution), enabling early detection of syntax errors, invalid configurations, security issues, and outdated action versions.

Core Features & Use Cases

  • Static analysis with actionlint to detect syntax and schema violations.
  • Local testing with act to validate workflow behavior without pushing changes.
  • Action version verification and security auditing to enforce safe, up-to-date dependencies.
  • Post-fix reruns to ensure that fixes resolve reported issues.

Quick Start

Use the validation tool to check all workflows in .github/workflows and run a local dry-run to verify correctness.

Frequently Asked Questions about github-actions-validator

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate GitHub Actions workflows locally before pushing changes?

Validate GitHub Actions workflows locally by running static analysis with actionlint to detect syntax errors and using act for local execution dry-runs. This identifies invalid configurations and schema violations without requiring a git push.

Can I test GitHub Actions workflows locally without committing them?

Test GitHub Actions workflows locally using act to execute dry-runs directly from your development environment. This simulates workflow behavior and validates execution logic safely before any code reaches the remote repository.

How do I check GitHub Actions workflows for security issues and outdated action versions?

Check GitHub Actions workflows for security issues and outdated action versions through static analysis that performs offline version verification and vulnerability audits. This enforces safe, up-to-date dependencies across your workflow files.

What is the best way to lint GitHub Actions workflows for schema violations?

Lint GitHub Actions workflows using actionlint to automatically detect schema violations and syntax errors. This static analysis approach ensures correctness during development and can be integrated into pre-commit validation hooks.

Do I need actionlint and act installed to run GitHub Actions validation locally?

Running GitHub Actions validation locally relies on actionlint for static analysis and act for local execution. These tools probe and enforce workflow correctness by identifying syntax errors, security issues, and version mismatches.

Why should I use local workflow validation instead of relying on GitHub Actions runners?

Local workflow validation catches syntax errors, invalid configurations, and security issues early using actionlint and act, preventing failed pipeline runs. It enables pre-commit validation and security reviews without waiting for remote execution feedback.