Contents Menu Expand Light mode Dark mode Auto light/dark, in light mode Auto light/dark, in dark mode Skip to content
GreenSecOps Rules
Light Logo Dark Logo
GreenSecOps Rules
  • Rules Reference
    • Energy Rules
      • Build artifacts not reused
      • Missing dependency cache
      • Large runner without justification
      • Sequential jobs without dependency
      • Redundant steps across jobs
      • Oversized runner for job complexity
    • Maintainability Rules
      • Hardcoded environment-specific values
      • Missing name on jobs or steps
      • Duplicated workflow blocks
      • Workflow exceeds complexity threshold
    • Performance Rules
      • Cache key never misses
      • Duplicated jobs without matrix strategy
      • Expensive steps before fast-fail checks
      • Unnecessary full git history checkout
    • Reliability Rules
      • No explicit artifact retention
      • continue-on-error masking failures
      • Missing concurrency group on PR workflow
      • No retry on flaky network step
      • Missing job timeout
      • Action not pinned to SHA
    • Security Rules
      • Excessive GITHUB_TOKEN permissions
      • Potential hardcoded secret
      • Long-lived cloud credentials instead of OIDC
      • pull_request_target with PR head checkout
      • Third-party action not pinned to SHA
      • Artifact uploaded without retention limit
Back to top
View this page

GreenSecOpsΒΆ

GreenSecOps analyzes GitHub Actions workflows and reports violations across five categories: security, reliability, performance, maintainability, and energy efficiency.

  • Rules Reference
    • Energy Rules
    • Maintainability Rules
    • Performance Rules
    • Reliability Rules
    • Security Rules
Next
Rules Reference
Copyright © 2026, GreenSecOps
Made with Sphinx and @pradyunsg's Furo