Open any repo and understand its automation in seconds. Daggler visualizes, validates, secures, and simulates your workflows — then ships clean native YAML. No lock-in, no proprietary runner.
Events flow to workflows, jobs, and steps; permissions, secrets, and artifacts flow between them. Daggler treats that graph as the source of truth — and rewrites it back to clean native YAML.
See every trigger, job dependency, matrix expansion, and the third-party actions you depend on — laid out as an interactive graph.
Edit jobs and steps through typed inspectors. Every visual change round-trips to a precise YAML patch — never a regenerated file.
Five layers: schema, expression contexts, graph semantics, action metadata, and policy. Diagnostics map to exact YAML lines and graph nodes.
Catch unpinned actions, over-broad permissions, untrusted-input injection, and missing environment gates — before they merge.
Pick an event — a PR from a fork, a tag push — and see exactly which jobs run, which skip, and which secrets become reachable.
Dispatch a real run on a temporary branch or self-hosted runner. Logs stream back and map directly to your graph nodes.
Ship clean native YAML by copy, commit, or a PR with a graph diff and security summary. No proprietary format, ever.
Most tools bury you in runner modes. Daggler exposes exactly three levels — and the cost, speed, and authority of each is always clear. Static checks need no Docker. Local approximation runs through a bridge. GitHub runs are the real thing.
Instant, deterministic. Parse, validate contexts, expand matrices, run policy and security rules — entirely in the browser and worker.
Pair a local bridge with npx daggler-cli bridge to run actionlint and act against a real checkout. Useful, not authoritative.
Dispatch a real run on a temporary branch or self-hosted runner. Logs stream back and map directly to your graph nodes.
Daggler ships policy packs for least-privilege, release hardening, and a current one: AI agent workflow safety — catching untrusted issue and PR content flowing into prompts and scripts.
Trace every write scope and every secret from its source to the steps that can read it.
Verified owner, release age, SHA-pinning, and known advisories — surfaced inline as you insert an action.
Run packs as guidance, or enforce them on PRs with Check annotations that block the merge.
The CLI and the editor run entirely on your machine, with your own gh login. No account, no hosted backend, and your workflows never leave your computer.
Lint your workflows in one command, or open the editor and see them as a graph.