THE OPEN TOOLKIT / 2 TOOLS

CI and build security
A closer look.

GitHub Actions workflows and Dockerfiles. Inspect the permissions, sources, and build decisions that are easy to miss.

Free to use. No account. Local reviews. Optional AI summaries.

THE TOOLKIT

Find the right check.

Search by task, technology, or file format.

Sort

Every tool explains its limits. Local reviews stay on your device; online lookups and optional AI explain what is sent.

GitHub Actions YAML

Review workflow permissions, action pinning, privileged triggers, and untrusted expressions before they reach your build.

Dockerfile

Check base-image references, runtime user declarations, installation patterns, and secret-bearing build settings.