DEV Community

Cover image for PipeChecker: A local CI/CD auditor to catch circular deps, secrets, and unpinned tags before you push πŸ¦€
Muhammad Ayyan Khan
Muhammad Ayyan Khan

Posted on

PipeChecker: A local CI/CD auditor to catch circular deps, secrets, and unpinned tags before you push πŸ¦€

Hey everyone,

I got tired of the "push and pray" method of CI/CD configuration. Waiting for a
remote runner just to find out I had a circular dependency or a missing needs
reference felt like a waste of time.

So I built PipeChecker in Rust. It's a CLI tool that provides instant, local
feedback on your workflows.

What it does:

  • DAG Analysis: Uses Tarjan's algorithm to detect circular dependencies.
  • Security: Scans for hardcoded secrets and undeclared env vars.
  • Best Practices: Enforces pinning for Docker images and GitHub Actions.
  • TUI: Includes an interactive mode for navigating multiple workflows.
  • Platforms: Supports GitHub Actions, GitLab, and CircleCI.

Quick Start:
cargo install pipechecker
pipechecker --all --tui

It’s open source and I’m looking for feedback/contributors!

GitHub: https://github.com/Ayyankhan101/PipeChecker.git

Would love to hear how you handle local pipeline validation!

Top comments (0)