npx claude-code-templates@latest --command automation/act claude-code — act
Scanned by NVIDIA SkillSpector
Automated static analysis (no LLM) · v2.12.0 · 2026-10-17
1 observation
scanner score 15/100
SkillSpector looks for patterns such as shell commands, credential access, network calls or unpinned dependencies. An observation is something worth reading in the files before you install, not a confirmed vulnerability. Components that run code locally, like hooks, MCP servers and security tooling, naturally show more of them.
- Credential AccessPrivilege Escalation · act.md:52
Learn more about NVIDIA SkillSpector.
Content
Act - GitHub Actions Local Execution
Execute GitHub Actions workflows locally using act: $ARGUMENTS
Current Workflows
- Available workflows: !
find .github/workflows -name "*.yml" -o -name "*.yaml" | head -10 - Act configuration: @.actrc (if exists)
- Docker status: !
docker --version
Task
Execute GitHub Actions workflow locally:
Setup Verification
- Ensure act is installed:
act --version - Verify Docker is running
- Check available workflows in
.github/workflows/
- Ensure act is installed:
Workflow Selection
- If workflow specified: Run specific workflow
$ARGUMENTS - If no workflow: List all available workflows
- Check workflow triggers and events
- If workflow specified: Run specific workflow
Local Execution
- Run workflow with appropriate flags
- Use secrets from
.envor.secrets - Handle platform-specific runners
- Monitor execution and logs
Debugging Support
- Use
--verbosefor detailed output - Use
--dry-runfor testing - Use
--listto show available actions
- Use
Example Commands
bash
# List all workflows
act --list
# Run specific workflow
act workflow_dispatch -W .github/workflows/$ARGUMENTS.yml
# Run with secrets
act --secret-file .env
# Debug mode
act --verbose --dry-run