GitHub Actions Workflow Validator
Validate a GitHub Actions workflow YAML and catch security and structure mistakes.
About the GitHub Actions Workflow Validator
Paste a .github/workflows file and get an instant review: YAML parsing, required keys (on, jobs, runs-on, steps), unknown trigger events, invalid job ids, broken needs: dependencies, unpinned or outdated actions, script-injection risks from untrusted github.event data, curl-pipe-to-shell steps and missing least-privilege permissions blocks. Everything runs in your browser.
Examples
Unpinned action
- uses: actions/checkout@masterOutput
YAMLWARNING: pins a moving branch — pin a tag or SHA insteadKeyboard shortcuts
- Copy the main outputCtrl / ⌘ + Shift + C
- Download the resultCtrl / ⌘ + S
- Share this toolCtrl / ⌘ + Shift + S
- Reset the inputsAlt + R
- Open the tool search paletteCtrl / ⌘ + K
Related tools
.editorconfig Generator
Dev Utilities
Create an .editorconfig file with per-language overrides.
.htaccess Redirect Generator
Dev Utilities
Generate Apache .htaccess redirect and rewrite rules.
Bash Alias Generator
Dev Utilities
Create shell aliases for Bash, Zsh or Fish with correct quoting.
Chmod Calculator
Dev Utilities
Unix permission calculator: checkboxes, octal, and symbolic.
Cron Expression Builder & Parser
Dev Utilities
Build, explain and preview cron schedules with timezone-aware next runs.
Crontab to Human Readable
Dev Utilities
Translate whole crontab files into plain English, line by line.
Frequently asked questions
Read more
- How to explore, edit and map a source project in your browser
A practical guide to opening a source archive, tracing dependencies, inspecting syntax trees and exporting edited files without uploading a repository.
Version 1.0.0 · Updated 2026-08-22 · Runs entirely in your browser