Tools
Free utilities for hardening GitHub Actions workflows. No signup, no data stored — they run against the same dataset behind our scores.
SHA Pin Generator
Rewrite every `uses:` line to an immutable commit SHA.
Paste a workflow file and get back the pinned replacement lines, plus a maintenance and advisory check on every action it recognises.
Open the tool →README Badge
Show your action's grade where people actually look.
An embeddable badge that reads the current score every time it loads, so it stays honest without you touching it again. Free, no attribution required.
Open the tool →More tools are on the way. Missing something you'd use? Tell us what to build.