612df0e Add ci-doctor (CI cost+security audit) and pin-actions
📊 Changes
1 file changed (+2 additions, -0 deletions)
View changed files
📝README.md (+2 -0)
📄 Description
What this adds
ci-doctor - Audit a workflow for cost waste, security gaps, and reliability issues. 16 rules, SARIF + PR comment via ci-doctor-action.
pin-actions - One-shot CLI that pins every uses: reference in your workflows to a SHA.
Why
depmedic ships a family of CI cost+security auditors covering GitHub, GitLab, Bitbucket, Azure Pipelines, and CircleCI. Each is a single-binary npx invocation, MIT, no telemetry, with SARIF + PR comment integration. They are well-tested (3-5 node --test suites each), versioned, and actively maintained.
Conformance
One line per entry in alphabetical order within the section
Description starts with a verb (Audit / Audits)
Trailing period on the description
Link target is the canonical repo URL
Happy to adjust wording, ordering, or section placement; ping me on this PR.
If you'd rather decline, no hard feelings. Thanks for the list.
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/sdras/awesome-actions/pull/780
**Author:** [@depmedicdev-byte](https://github.com/depmedicdev-byte)
**Created:** 4/28/2026
**Status:** 🔄 Open
**Base:** `main` ← **Head:** `add-ci-doctor-and-pin-actions`
---
### 📝 Commits (1)
- [`612df0e`](https://github.com/sdras/awesome-actions/commit/612df0e9a8480a4eaf6541dce9c3a5208e45cee3) Add ci-doctor (CI cost+security audit) and pin-actions
### 📊 Changes
**1 file changed** (+2 additions, -0 deletions)
<details>
<summary>View changed files</summary>
📝 `README.md` (+2 -0)
</details>
### 📄 Description
### What this adds
> - [ci-doctor](https://github.com/depmedicdev-byte/ci-doctor) - Audit a workflow for cost waste, security gaps, and reliability issues. 16 rules, SARIF + PR comment via [ci-doctor-action](https://github.com/depmedicdev-byte/ci-doctor-action).
>
> - [pin-actions](https://github.com/depmedicdev-byte/pin-actions) - One-shot CLI that pins every `uses:` reference in your workflows to a SHA.
### Why
depmedic ships a family of CI cost+security auditors covering GitHub, GitLab, Bitbucket, Azure Pipelines, and CircleCI. Each is a single-binary `npx` invocation, MIT, no telemetry, with SARIF + PR comment integration. They are well-tested (3-5 `node --test` suites each), versioned, and actively maintained.
### Conformance
- One line per entry in alphabetical order within the section
- Description starts with a verb (Audit / Audits)
- Trailing period on the description
- Link target is the canonical repo URL
Happy to adjust wording, ordering, or section placement; ping me on this PR.
---
If you'd rather decline, no hard feelings. Thanks for the list.
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/sdras/awesome-actions/pull/780
Author: @depmedicdev-byte
Created: 4/28/2026
Status: 🔄 Open
Base:
main← Head:add-ci-doctor-and-pin-actions📝 Commits (1)
612df0eAdd ci-doctor (CI cost+security audit) and pin-actions📊 Changes
1 file changed (+2 additions, -0 deletions)
View changed files
📝
README.md(+2 -0)📄 Description
What this adds
Why
depmedic ships a family of CI cost+security auditors covering GitHub, GitLab, Bitbucket, Azure Pipelines, and CircleCI. Each is a single-binary
npxinvocation, MIT, no telemetry, with SARIF + PR comment integration. They are well-tested (3-5node --testsuites each), versioned, and actively maintained.Conformance
Happy to adjust wording, ordering, or section placement; ping me on this PR.
If you'd rather decline, no hard feelings. Thanks for the list.
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.