What tool does this skill use to check versions?

This skill utilizes 'aver', a specialized Go-based utility designed to scan GitHub Action versions directly from your workflow files.

Can I use this for private repositories?

Absolutely. It runs locally on your files and can utilize a GITHUB_TOKEN environment variable to handle API rate limits for both public and private repos.

Can I filter the output to only show major version updates?

Yes, the skill supports flags like --ignore-minor to focus specifically on significant version jumps.

Does it follow GitHub Action best practices?

Yes, the skill encourages pinning to major versions (like @v4) rather than full semver to balance stability with receiving non-breaking updates.

Does it support SHA-pinned actions for high security?

Yes, it can analyze SHA-pinned actions and report exactly how many commits they are behind the latest release.

GitHub Actions Version Checker

Name: GitHub Actions Version Checker
Author: llimllib

byllimllib

•

Deployment & DevOps

Automates the detection and updating of outdated GitHub Actions versions within workflow files to ensure security and reliability.

About

This skill integrates the aver utility into Claude's environment, allowing it to scan .github/workflows/*.yml files for outdated dependencies. It helps developers maintain secure and stable CI/CD pipelines by identifying newer major versions, managing SHA-pinned actions, and providing actionable update recommendations. It is particularly useful during repository audits or when setting up new automated workflows to ensure best practices like major-version pinning and API rate limit management are followed.

Key Features

Automated scanning of all GitHub Action workflow files
1 GitHub stars
Customizable reporting including JSON output and minor version filtering
Support for major version pinning and SHA-pinned security checks
Integration with the aver CLI for high-speed local analysis
Identification of outdated action versions versus latest releases

Use Cases

Validating new workflow files during creation to ensure use of latest major versions
Automating periodic maintenance tasks to reduce technical debt in DevOps pipelines
Auditing legacy repositories to bring CI/CD dependencies up to date

About

Key Features

Automated scanning of all GitHub Action workflow files
1 GitHub stars
Customizable reporting including JSON output and minor version filtering
Support for major version pinning and SHA-pinned security checks
Integration with the aver CLI for high-speed local analysis
Identification of outdated action versions versus latest releases

Use Cases

Validating new workflow files during creation to ensure use of latest major versions
Automating periodic maintenance tasks to reduce technical debt in DevOps pipelines
Auditing legacy repositories to bring CI/CD dependencies up to date