Repo Validator

This tool analyzes GitHub repositories to validate configuration files, workflows, and code quality against established standards. It fetches workflow YAMLs, configuration files, and key metadata from the target repo, then performs static checks, YAML/JSON schema validations, and policy-based verifications. The process runs entirely on the input data without executing any repository code, ensuring safety during analysis.
Conceptually, validation occurs in layers: syntax and schema validation for YAML/JSON, policy checks for potential security risks (such as exposed tokens or secrets patterns), and consistency checks against repository metadata and CI practices. Results are returned as a structured report with severity levels and concrete remediation steps.
Who benefits includes developers, DevOps professionals, security engineers, and QA teams who need fast, repeatable checks during PR reviews or before CI runs. The tool’s unique value lies in combining repository-structure validation with workflow-specific checks and actionable guidance, enabling faster remediation and improved pipeline hygiene.
Core features include input normalization, optional advanced checks, deterministic scoring, and exportable artifacts. Use cases cover pre-merge validation, compliance audits, and onboarding pipelines to enforce pipeline hygiene. The tool supports both public and private repositories (with a token) and can be integrated into automated workflows to standardize repository quality checks across teams.