Mutable action references
Spot actions that can change underneath a workflow.
GitHub Actions security tooling
Fix dangerous
GitHub Actions workflows.
ActionFix statically analyzes GitHub Actions workflows for risky configurations and helps you understand what needs to change.
Public repository scanner coming soon.
DeterministicRules you can reproduce
FocusedBuilt for GitHub Actions
ActionableFindings that point to change
What it looks for
Clarity where workflows get risky.
Focused analysis for the configurations that are easy to miss and important to get right.
Token permission risks
Understand when workflow permissions are broader than needed.
Untrusted execution paths
Surface dangerous pull request, expression, and runner patterns.
A deliberate boundary
Your repository stays data.
ActionFix analyzes workflow configuration as data. It does not clone and execute repository code, actions, scripts, or containers.
Product status
Built carefully, step by step.
Analysis engineComplete
Public repository scanningIn progress
Web scannerComing soon
RemediationPlanned