CloudByAlex Labs · v1

DevOps Doctor
GitHub Actions Scanner

Paste a workflow and get an instant security review for common CI/CD risks: excessive permissions, unpinned actions, risky shell commands, secret exposure and more.

Runs locally in your browser · Your workflow is never uploaded
Workflow YAML
Paste .github/workflows/*.yml or open a local file
0 lines · Static heuristic scan — no code is executed.
DevOps Doctor v1 uses static heuristic checks and is not a replacement for GitHub Advanced Security, CodeQL, StepSecurity, actionlint or a full security review.