diff --git a/.github/workflows/validate-actions.yml b/.github/workflows/validate-actions.yml
new file mode 100644
index 0000000..680be5c
--- /dev/null
+++ b/.github/workflows/validate-actions.yml
@@ -0,0 +1,20 @@
+name: Validate Actions
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+
+jobs:
+  validate:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Run actionlint
+        uses: rhysd/actionlint@v1
+
+      - name: Validate action metadata conventions
+        run: ./scripts/validate-actions.sh
diff --git a/README.en.md b/README.en.md
index 0699b27..e5d88ab 100644
--- a/README.en.md
+++ b/README.en.md
@@ -20,6 +20,7 @@ A collection of GitHub Actions for sending notifications about GitHub events to
 - All actions run on `runs.using: node20`.
 - Execution entry points in `action.yml` are standardized to `dist/index.js`.
 - Release artifacts use `ncc` bundles and commit generated `dist/` output.
+- CI enforces metadata conventions (`node20`, `dist/index.js`) using `actionlint` + `scripts/validate-actions.sh`.
 
 ## 🔧 Setup Guide
 
diff --git a/README.md b/README.md
index 3b1f1f9..bed914b 100644
--- a/README.md
+++ b/README.md
@@ -20,6 +20,7 @@ GitHub 이벤트에 대한 알림을 다양한 플랫폼으로 전송하는 GitH
 - 모든 액션은 `runs.using: node20` 기준으로 동작합니다.
 - `action.yml`의 실행 엔트리는 `dist/index.js`로 통일되어 있습니다.
 - 배포 시 `ncc`로 번들된 `dist/` 산출물을 함께 커밋하는 방식을 사용합니다.
+- CI에서 `actionlint` + `scripts/validate-actions.sh`를 통해 메타데이터 규칙(`node20`, `dist/index.js`)을 자동 검증합니다.
 
 ## 🔧 설정 방법
 
diff --git a/scripts/validate-actions.sh b/scripts/validate-actions.sh
new file mode 100755
index 0000000..f084799
--- /dev/null
+++ b/scripts/validate-actions.sh
@@ -0,0 +1,36 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+repo_root="$(cd "$(dirname "$0")/.." && pwd)"
+cd "$repo_root"
+
+failures=0
+
+while IFS= read -r -d '' action_file; do
+  action_dir="$(dirname "$action_file")"
+  rel="${action_dir#./}"
+
+  using=$(awk -F"'" '/^  using:/{print $2}' "$action_file" | head -n1)
+  main=$(awk -F"'" '/^  main:/{print $2}' "$action_file" | head -n1)
+
+  if [[ "$using" != "node20" ]]; then
+    echo "[FAIL] $rel/action.yml: runs.using must be 'node20' (got: ${using:-<missing>})"
+    failures=1
+  fi
+
+  if [[ "$main" != "dist/index.js" ]]; then
+    echo "[FAIL] $rel/action.yml: runs.main must be 'dist/index.js' (got: ${main:-<missing>})"
+    failures=1
+  fi
+
+  if [[ ! -f "$action_dir/dist/index.js" ]]; then
+    echo "[FAIL] $rel/dist/index.js: file is missing"
+    failures=1
+  fi
+done < <(find . -maxdepth 2 -type f -name action.yml -print0)
+
+if [[ $failures -ne 0 ]]; then
+  exit 1
+fi
+
+echo "All action metadata checks passed."