GitHub Actions Break-Date Audit

It reads a GitHub Actions workflow or an action.yml and flags every line that has a published break date. Each finding names the date itself, why the line stops working, and the exact version or label to move to. It also flags triggers and permissions that expose your secrets to code from a fork.

Developers and platform engineers who own the .github/workflows files that ship their releases, and reviewers of workflows an AI assistant produced. Training data is older than the deprecation calendar, so generated workflows arrive with retired runner labels and action majors that already stopped starting.

actionlint checks syntax, expressions and shell, and Dependabot bumps versions if you configured it. Neither carries a calendar. Neither tells you that download-artifact is only safe from v7 while upload-artifact is safe from v6 and checkout from v5, or that the ubuntu-22.04 brownouts begin on 17 September 2026.

The free tier checks the open file, or only the lines you select, against all 35 rules. No key, no watermark, no usage cap, and no finding is hidden. The licence covers a different job: scanning every workflow in the repository at once, exporting the dated audit, CI output and re-checking on save.

A US DevOps engineer averages $59.11 an hour (ZipRecruiter, 7 September 2026). Auditing one repository by hand means opening every workflow and checking each action against its own release notes to find where node24 begins. This is $29 once, one licence key per person or team seat, with a seven-day full refund.