Tools

Runs GitHub Actions workflows locally in Docker, so you can test .github/workflows changes without repeated commits and pushes, or use workflows as a local task runner. Needs Docker installed.

Static security analysis for CI/CD config: finds template injection, credential leaks, excessive permissions and more in GitHub Actions workflows, also covers Dependabot and pre-commit configs, and auto-fixes some findings.

GitHub's official gh extension for writing Actions workflows in Markdown that AI agents execute, compiled into standard Actions. Choose engines like Copilot, Claude Code or Codex; runs in a read-only sandbox by default. Requires gh.

Interviews you to design an agentic control loop for your codebase in control-theory terms: a set point, a sensor built from existing tooling, a controller that picks small low-risk changes, and a coding agent that opens PRs. Builds each part to run locally before wiring a scheduled CI workflow.

Turns a repeatable agent task into a repo-local skill plus a GitHub Actions workflow that runs a coding agent (Claude Code, Codex, OpenCode or CodeLayer) on a schedule, with a prompt, memory file and one-open-PR bound. Reads the repo first, then walks you through cadence, scope and validation.