Workflow Sentry is one of the twelve projects I've marked Gold. It's a local tool for reviewing GitHub Actions files before you rely on them.
It checks for risky settings around permissions, action references and untrusted text passed into shell commands. You can compare a scan with an earlier one, keep reviewed exceptions, and export the results as HTML, Markdown, JSON or SARIF.
Version 1.4.0 also distinguishes files that weren't scanned from findings that were actually resolved, so a missing scan doesn't look like a fixed problem.
It doesn't execute your workflows or certify that they're safe. It gives you a repeatable way to find things that deserve a closer look and keep track of what you've reviewed.
https://t.co/nuine9bzSp
Workflow Sentry is one of the twelve projects I've marked Gold. It's a local tool for reviewing GitHub Actions files before you rely on them.
· Other posts