diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml
index 1edd79d2166bf73b9fac900e39bf64914db85d8c..d66067ff2c745255c86924f71e0e1009ca7ef51b 100644
--- a/.github/workflows/python.yml
+++ b/.github/workflows/python.yml
@@ -23,11 +23,14 @@ jobs:
         run: |
           python -m pip install --upgrade pip setuptools wheel
           pip install tockloader pylint
+      - name: Register matcher
+        run: echo ::add-matcher::./.github/python_matcher.json
       - name: Test code with pylint
-        run: |
-          echo ::add-matcher::./.github/python_matcher.json
-          find . -type f -name '*.py' -exec echo PYLINT:\{\} \; -exec pylint --rcfile=.pylintrc --score=n \{\} \;
-#          find . ! -path "./third_party/*" -type f -name '*.py' -exec echo PYLINT:\{\} \; -exec pylint --rcfile=.pylintrc --score=n \{\} \;
+        uses: ./github_actions/pylint
+        with:
+          config-file: .pylintrc
+          files: '**/*.py'
+          exclude-path: third_party
 
   yapf:
     runs-on: ubuntu-18.04
diff --git a/github_actions/pylint/Dockerfile b/github_actions/pylint/Dockerfile
new file mode 100644
index 0000000000000000000000000000000000000000..63fbb9af8da7f0a8c913cf0271793d0ddf1997d4
--- /dev/null
+++ b/github_actions/pylint/Dockerfile
@@ -0,0 +1,10 @@
+FROM python:3.7-alpine
+
+RUN apk add --no-cache bash build-base gcc
+RUN pip install --upgrade pip
+RUN pip install pylint
+RUN python --version ; pip --version ; pylint --version
+
+COPY entrypoint.sh /entrypoint.sh
+RUN chmod +x /entrypoint.sh
+ENTRYPOINT ["/entrypoint.sh"]
diff --git a/github_actions/pylint/action.yml b/github_actions/pylint/action.yml
new file mode 100644
index 0000000000000000000000000000000000000000..7ca6dda1609003b12cdda86d8f64afa710ab5f2e
--- /dev/null
+++ b/github_actions/pylint/action.yml
@@ -0,0 +1,20 @@
+---
+name: 'Pylint'
+description: 'Runs pylint across multiple files/modules'
+author: 'Jean-Michel Picod <jmichel@google.com>'
+inputs:
+  config-file:
+    description: pylintrc configuration file
+    required: false
+  files:
+    description: files, directories, or globs
+    required: true
+  ignore-files:
+    description: files to ignore/exclude
+    required: false
+  exclude-path:
+    description: paths to ignore/exclude
+    required: false
+runs:
+  using: docker
+  image: Dockerfile
diff --git a/github_actions/pylint/entrypoint.sh b/github_actions/pylint/entrypoint.sh
new file mode 100644
index 0000000000000000000000000000000000000000..f99938bee9db9177c7d0b59834ac3c95550feb6d
--- /dev/null
+++ b/github_actions/pylint/entrypoint.sh
@@ -0,0 +1,32 @@
+#!/bin/bash
+
+env
+
+PYLINT_CMD=pylint --score=n${INPUT_CONFIG_FILE:+ --rcfile=${INPUT_CONFIG_FILE}}
+EXCLUDE_PATH=${INPUT_EXCLUDE_PATH:-}
+EXCLUDE_FILES=${INPUT_EXCLUDE_PATH:-}
+
+SUCCESS=0
+for file in ${FILES}
+do
+  fname=$(basename $file)
+  directory=$(dirname $file)
+  if [[ "$directory" =~ "^${EXCLUDE_PATH}" ]]
+  then
+    echo "Ignoring file '$file' (reason: matching exclude-path parameter)"
+    continue
+  fi
+  if [[ "$fname" =~ "${EXCLUDE_FILES}" ]]
+  then
+    echo "Ignoring file '$file' (reason: matching exclude-files parameter)"
+    continue
+  fi
+  # Just to trigger the custom matcher
+  echo PYLINT:$file
+  if ! $PYLINT_CMD $file
+  then
+    SUCCESS=1
+  fi
+done
+
+exit $SUCCESS