Dev.to
7/24/2026

Three free tools for the CI noise tax
Short summary
Three open-source CLI tools address common CI inefficiencies: vulntriage prioritizes which CVEs actually matter, impactest determines which tests to run based on code changes, and gha-step lets developers dry-run GitHub Actions steps locally. All are Apache-2.0 licensed, installable via npm, and designed to be boringly explainable so they earn a place in existing CI pipelines without adding complexity.
- •vulntriage triages CVEs to surface only fix-now vulnerabilities
- •impactest runs only tests affected by code changes instead of full suites
- •gha-step dry-runs CI shell steps locally before pushing to GitHub Actions
Generated with AI, which can make mistakes.
Is this a good recommendation for you?



