{"repo":"azat-io/actions-up","free":true,"listed":false,"github":"https://github.com/azat-io/actions-up","clone":"git clone https://github.com/azat-io/actions-up.git","description":"🌊 Interactive CLI tool to update GitHub Actions to latest versions with SHA pinning","language":"TypeScript","stars":631,"topics":["actions","cli","dependencies","github-actions","security","workflow"],"license":"MIT","category":"cli-tools","readme_excerpt":"Actions Up! Actions Up scans your workflows and composite actions to discover every referenced GitHub Action, then checks for newer releases. Interactively upgrade and pin actions to exact commit SHAs for secure, reproducible CI, or preserve tag-style references when you need to stay on tags. Features - Auto-discovery : Scans all workflows ( .github/workflows/ .yml ) and composite actions ( .github/actions/ /action.yml and root action.yml / action.yaml ) - Reusable Workflows : Detects and updates reusable workflow calls at the job level - Flexible update styles : Use SHA pinning by default, or preserve tag-style references with --style preserve - Batch Updates : Update multiple actions at once - Interactive Selection : Choose which actions to update - Breaking Changes Detection : Warns about major version updates - Fast & Efficient : Optimized API usage with deduped lookups - CI/CD Integration : Use in GitHub Actions workflows for automated PR checks Why Keeping GitHub Actions updated is critical and time-consuming. Actions Up scans all workflows, highlights available updates, and can pin actions to SHAs for reproducibility. Without Actions Up With Actions Up :----------------------------- :------------------------------- Check each action manually Scan all workflows in seconds Risk using vulnerable versions SHA pinning for maximum security 30+ minutes per repository Under 1 minute total Security Motivation GitHub Actions run arbitrary code in your CI. If a job has secrets av","default_branch":null,"files":null,"tree":[],"storefront":"/r/azat-io","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/azat-io/actions-up/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}