CI and automation tools
The workflow file that runs with your secrets, and the bill it generates.
A GitHub Actions workflow is a program that runs with a token and your secrets, triggered by events that people outside your repository control. Two configurations turn that into remote code execution and both look like ordinary CI: pull_request_target checking out the fork's code, and untrusted event data interpolated into a shell script. The bill has its own surprises, because minutes are multiplied by platform and rounded up per job, so a macOS matrix leg costs ten times a Linux one.
Free, with no sign-up. Every one runs entirely in your browser: nothing you paste is uploaded, and there is no server to send it to.
GitHub Actions Workflow Linter
Who else can run code with your secrets
Check a GitHub Actions workflow for script injection, pull_request_target running fork code with your secrets, and actions pinned to a movable ref.
GitHub Actions Minutes and Cost Calculator
macOS is ten Linux minutes
Work out GitHub Actions minutes and cost, with the platform multiplier and the per-job rounding that bills a twenty second job as a full minute.