Three small workflows cover the whole job: daily checks of uptime, SSL certificates, security headers and compliance basics; smoke tests after every deploy; and automatic validation of bug reports from visitors. All free, all running inside your own repository.
A cron workflow that runs every morning and verifies the site responds, the SSL certificate isn't expiring soon, security headers are intact, and GDPR basics are still in place. Replaces monitoring SaaS at $10–15/month.
“The deploy succeeded” and “the site works” are two different questions. Two workflow steps check both after every release — uptime and a compliance scan — so a deleted privacy policy or broken redirect is caught immediately.
Let visitors report bugs with a tiny on-page script, then let CI validate each report before it goes anywhere. Bugs become structured data in your repo instead of an inbox nobody reads.
No repository needed to see what the scanner finds on your live site — free, no signup, results in about a minute.
Scan your site for free →