---
id: xiaolai/vmark/workflow-audit
version: "18e33ac5"
license: ISC
install: manual
updated: 2026-07-27
---

# Workflow Audit — Workflow Audit systematically reviews `.github/workflows/*.yml` files against security hardening, action version currency, and reliability standards. It discovers all workflow files, validates YAML syntax, runs a comprehensive checklist covering permissions, script injection, timeouts, and cross-workflow consistency, then reports findings sorted by severity with concrete fixes for each issue.

Publisher: xiaolai · Stars: 424 · Updated: 2026-07-27

Install (manual): `git clone https://github.com/xiaolai/vmark`

*Unlicensed repository - metadata only, no file contents reproduced.*

[View on SkillFed](https://skillfed.io/xiaolai/vmark/workflow-audit) · [View on GitHub](https://github.com/xiaolai/vmark)