Tools

Free utilities for hardening GitHub Actions workflows. No signup, no data stored — they run against the same dataset behind our scores.

SHA Pin Generator

Rewrite every `uses:` line to an immutable commit SHA.

Paste a workflow file and get back the pinned replacement lines, plus a maintenance and advisory check on every action it recognises.

More tools are on the way. Missing something you'd use? Tell us what to build.