What tool does this skill use to check versions?

This skill utilizes 'aver', a specialized Go-based utility designed to scan GitHub Action versions directly from your workflow files.

Can I use this for private repositories?

Absolutely. It runs locally on your files and can utilize a GITHUB_TOKEN environment variable to handle API rate limits for both public and private repos.

Can I filter the output to only show major version updates?

Yes, the skill supports flags like --ignore-minor to focus specifically on significant version jumps.

Does it follow GitHub Action best practices?

Yes, the skill encourages pinning to major versions (like @v4) rather than full semver to balance stability with receiving non-breaking updates.

Does it support SHA-pinned actions for high security?

Yes, it can analyze SHA-pinned actions and report exactly how many commits they are behind the latest release.

GitHub Actions Version Checker

Name: GitHub Actions Version Checker
Author: llimllib

byllimllib

•

Deployment & DevOps

Automates the detection and updating of outdated GitHub Actions versions within workflow files to ensure security and reliability.

This skill integrates the aver utility into Claude's environment, allowing it to scan .github/workflows/*.yml files for outdated dependencies. It helps developers maintain secure and stable CI/CD pipelines by identifying newer major versions, managing SHA-pinned actions, and providing actionable update recommendations. It is particularly useful during repository audits or when setting up new automated workflows to ensure best practices like major-version pinning and API rate limit management are followed.

Key Features

01Automated scanning of all GitHub Action workflow files

021 GitHub stars

03Customizable reporting including JSON output and minor version filtering

04Support for major version pinning and SHA-pinned security checks

05Integration with the aver CLI for high-speed local analysis

06Identification of outdated action versions versus latest releases

Use Cases

01Validating new workflow files during creation to ensure use of latest major versions

02Automating periodic maintenance tasks to reduce technical debt in DevOps pipelines

03Auditing legacy repositories to bring CI/CD dependencies up to date

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add llimllib/aver github-actions-version-check

For use in Claude.ai and ChatGPT

Download Skill