rhysd/actionlint

Health v2 · maintenance only

Adoption not part of the score

4172 stars · 263 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

actionlint is a static checker for GitHub Actions workflow files, written in Go. It validates syntax, type-checks ${{ }} expressions, verifies action inputs/outputs, integrates shellcheck/pyflakes, and detects security issues like script injection and hard-coded credentials.

Use cases

• validate github actions workflow files before committing
• catch errors in ci workflow yaml
• check ${{ }} expression types in github actions
• find script injection vulnerabilities in workflows
• lint run: shell scripts in github actions
• verify action inputs and outputs are correct

When to choose

• you maintain GitHub Actions workflows and want to catch errors before pushing
• you want automated security checks like script injection detection in CI definitions
• you need shellcheck/pyflakes integration for run: scripts
• you want a fast, single-binary linter usable locally, in CI, or as a pre-commit hook

When to avoid

• you need linting for general YAML files unrelated to GitHub Actions
• you want a generic CI/CD pipeline tool rather than a workflow file checker
• you need runtime validation of workflows rather than static analysis

Facets

cli-tool · maturity active

linter ci-cd static-site-generator developer-tools developer-tools apis cli cross-platform wasm go github-actions workflow-validation yaml-linter shellcheck-integration static-analysis devops automation

Member repositories

For agents

markdown · JSON · MCP: product_card(name="rhysd/actionlint")