WorkflowGuard v1.0.4

Full Changelog: v1.0.3...v1.0.4

workflowguard v1.0.3

• CI now also runs the test suite on windows-latest.

WorkflowGuard v1.0.2

Removes generated wheel/source ZIP files from the repository tree; current distributions are attached to this release instead. Refreshes install examples for v1.0.2.\n\nChecks: 43 tests passed; installed wheel starts successfully.

WorkflowGuard v1.0.1 — usable release instructions

What's new

• Fixed release installation instructions and replaced the unpublished Action example with a working CLI workflow.
• Added project support and Pro Kit links.
• The repository now contains the source tree, packaging metadata, license, and CI workflow.

Install

Download the wheel below, then run python -m pip install workflowguard-1.0.1-py3-none-any.whl from its folder. See the README for source installation and GitHub Actions setup.

Compatibility

Python 3.11 or newer. Free CLI, MIT license. The optional Pro Kit is a separate 50 ₽ template pack.

Verification

The v1.0.0 codebase had 41 passing tests and 2 symlink tests skipped on this Windows environment. v1.0.1 changes documentation and package version only; the wheel build completed successfully.

WorkflowGuard v1.0.0 — Actions security checks

WorkflowGuard v1.0.0

Offline security checks for GitHub Actions workflow YAML.

• 8 focused checks for permissions, pull_request_target, action pinning, checkout credentials, secret interpolation, untrusted shell input, and reusable workflow refs.
• Text, JSON, and SARIF reports.
• Local scanning only: the tool does not execute workflow commands or send workflow contents over the network.
• Python 3.11+; wheel and source bundle are attached to the repository files.

Verification: 41 tests passed on Windows; 2 symlink tests were skipped because symlink creation was unavailable in this environment. The repository self-scan reported 0 findings.

Static analysis is not a guarantee that a workflow is safe. Review each finding and inspect third-party Actions yourself.