docs: link the verified free GitHub Marketplace Action

README.md

@@ -6,7 +6,7 @@
 
 **Inspect hidden execution paths in an unfamiliar GitHub repository — without executing its code.**
 
-[Live website](https://harshitethic.github.io/clonepeek/) · [Watch genuine CLI replay](https://harshitethic.github.io/clonepeek/#video-demo) · [Developer discussion](https://www.producthunt.com/p/clonepeek/which-repo-defined-commands-do-you-check-before-opening-a-project) · [Quick start](#quick-start) · [5-minute audit guide](docs/BEFORE-YOU-TRUST-A-REPO.md) · [What it finds](#what-it-finds) · [CI and PR reviews](#ci-and-pr-reviews) · [Threat model](docs/THREAT_MODEL.md) · [Contribute](CONTRIBUTING.md)
+[Live website](https://harshitethic.github.io/clonepeek/) · [GitHub Marketplace](https://github.com/marketplace/actions/clonepeek-passive-repository-execution-audit) · [Watch genuine CLI replay](https://harshitethic.github.io/clonepeek/#video-demo) · [Developer discussion](https://www.producthunt.com/p/clonepeek/which-repo-defined-commands-do-you-check-before-opening-a-project) · [Quick start](#quick-start) · [5-minute audit guide](docs/BEFORE-YOU-TRUST-A-REPO.md) · [What it finds](#what-it-finds) · [CI and PR reviews](#ci-and-pr-reviews) · [Threat model](docs/THREAT_MODEL.md) · [Contribute](CONTRIBUTING.md)
 
 [![CI](https://github.com/harshitethic/clonepeek/actions/workflows/ci.yml/badge.svg)](https://github.com/harshitethic/clonepeek/actions/workflows/ci.yml) ![Python 3.10+](https://img.shields.io/badge/Python-3.10%2B-blue) ![License MIT](https://img.shields.io/badge/license-MIT-green) ![Offline scans](https://img.shields.io/badge/scanning-offline-black)
 

docs/index.html

@@ -213,7 +213,7 @@ <h3 id="video-demo-title">A real CLI run, in 34 seconds.</h3>
       <div class="command"><code id="action-command">- uses: harshitethic/clonepeek@v0.5.1
   with:
     fail-on: none</code><button class="copy" data-copy="action-command" type="button" aria-label="Copy workflow snippet">Copy</button></div>
-      <p style="margin:15px 0 0"><a class="subtle-link" href="https://github.com/harshitethic/clonepeek/blob/main/docs/GITHUB-ACTION.md">Full workflow with checkout and options ↗</a></p>
+      <p style="margin:15px 0 0"><a class="subtle-link" href="https://github.com/harshitethic/clonepeek/blob/main/docs/GITHUB-ACTION.md">Full workflow with checkout and options ↗</a> · <a class="subtle-link" href="https://github.com/marketplace/actions/clonepeek-passive-repository-execution-audit">Free action on GitHub Marketplace ↗</a></p>
     </div>
   </div>
 </section>
@@ -246,7 +246,7 @@ <h3 id="video-demo-title">A real CLI run, in 34 seconds.</h3>
   <div class="final"><span class="eyebrow">MIT licensed · openly developed</span><h2>Trust your tools. Inspect the hooks.</h2><p>ClonePeek is small, read-only and candid about its limits. Review the source, run the harmless demo, or contribute a missing execution surface.</p><div class="actions" style="justify-content:center;margin-bottom:0"><a class="primary" href="https://github.com/harshitethic/clonepeek">View the source on GitHub ↗</a><a class="secondary" href="https://github.com/harshitethic/clonepeek/issues/14">Contribute a test case ↗</a></div></div>
 </div>
 </main>
-<footer><div class="wrap foot-row"><span>© 2026 ClonePeek contributors · MIT · No tracking or telemetry on this landing page</span><div class="foot-links"><a href="https://github.com/harshitethic/clonepeek">GitHub</a><a href="https://www.producthunt.com/products/clonepeek">Product Hunt</a><a href="https://github.com/harshitethic/clonepeek/releases/tag/v0.5.1">Release v0.5.1</a><a href="https://github.com/harshitethic/clonepeek/blob/main/docs/THREAT_MODEL.md">Threat model</a></div></div></footer>
+<footer><div class="wrap foot-row"><span>© 2026 ClonePeek contributors · MIT · No tracking or telemetry on this landing page</span><div class="foot-links"><a href="https://github.com/harshitethic/clonepeek">GitHub</a><a href="https://github.com/marketplace/actions/clonepeek-passive-repository-execution-audit">GitHub Marketplace</a><a href="https://www.producthunt.com/products/clonepeek">Product Hunt</a><a href="https://github.com/harshitethic/clonepeek/releases/tag/v0.5.1">Release v0.5.1</a><a href="https://github.com/harshitethic/clonepeek/blob/main/docs/THREAT_MODEL.md">Threat model</a></div></div></footer>
 <script>
 (() => {
   'use strict';

tests/test_public_docs.py

@@ -74,6 +74,9 @@ def test_sitemap_home_and_existing_article_links(self):
         self.assertIn(discussion, homepage)
         self.assertIn(discussion, (ROOT / "README.md").read_text(encoding="utf-8"))
         self.assertIn("https://www.producthunt.com/products/clonepeek", homepage)
+        marketplace = "https://github.com/marketplace/actions/clonepeek-passive-repository-execution-audit"
+        self.assertIn(marketplace, homepage)
+        self.assertIn(marketplace, (ROOT / "README.md").read_text(encoding="utf-8"))
         self.assertNotIn("ask for upvotes", homepage.lower())
         self.assertNotIn("64 automated tests", homepage)
         self.assertNotIn("74 tests. Three OSes.", homepage)