Version updated for https://github.com/sdxiaomage/ci-health-audit to version v1.1.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary Purpose and Functionality: The CI Health Audit GitHub Action performs a heuristic static audit of GitHub Actions workflows to identify common security and reliability risks. It checks for issues like un-pinned third-party actions, self-hosted runners, excessive permissions, dangerous event interpolation, insecure curl/wget usage, and mutable container tags.

Version updated for https://github.com/sdxiaomage/ci-health-audit to version v1.0.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary This GitHub Action scans GitHub Actions workflows for common security and reliability risks such as untrusted pull-request head checkout, lack of permissions, missing timeouts, and attacker-controlled event fields. It produces a report in Markdown or JSON format and can fail the CI build at a chosen severity threshold. The audit is run locally on the runner without uploading workflow files to an external service.