skills.rest
martinholovsky
martinholovskyCOMMUNITY
Explore all skills by this author →
𝕏@martinholovskyGitHub

CI/CD Pipeline Security Expert

Automate CI/CD pipeline security hardening with GitHub Actions.

45|4|Updated Nov 25, 2025
Search Tags:#devops#ci/cd#security#github actions#supply chain#code signing
One-click install
npx skills add https://github.com/martinholovsky/claude-skills-generator --skill ci-cd-pipeline-security-expert
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: CI/CD Pipeline Security Expert
Source: https://github.com/martinholovsky/claude-skills-generator/tree/main/skills/ci-cd
Command: npx skills add https://github.com/martinholovsky/claude-skills-generator --skill ci-cd-pipeline-security-expert

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill hardens your CI/CD pipelines against common security threats, ensuring the integrity and safety of your software supply chain.

Core Features & Use Cases

  • Secret Management: Implements best practices for handling sensitive credentials.
  • Code Signing: Automates the signing of artifacts for Windows, macOS, and Linux.
  • Supply Chain Security: Enforces pinning of dependencies, SBOM generation, and vulnerability scanning.
  • Use Case: Securely build and release a desktop application by ensuring all dependencies are scanned, artifacts are signed, and deployment credentials are never exposed in logs.

Quick Start

Implement a secure GitHub Actions workflow for building and signing a desktop application.

Frequently Asked Questions about CI/CD Pipeline Security Expert

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I secure secrets in GitHub Actions CI/CD pipelines?▼

Supply chain security in CI/CD involves pinning dependencies, generating SBOMs, and running vulnerability scans. This ensures all third-party components are verified against known vulnerabilities before building desktop applications.

How do I automate code signing for desktop applications across Windows, macOS, and Linux?▼

Automating code signing for Windows, macOS, and Linux requires configuring pipeline security to sign artifacts during the build process. This guarantees the integrity and origin of released desktop applications.

What security scanning tools do I need for a secure GitHub Actions workflow?▼

A secure GitHub Actions workflow requires integrating SAST, secret detection, and container scanning tools. These tools identify vulnerabilities and exposed credentials within your codebase during the CI/CD process.

Does pipeline security hardening support dependency pinning and artifact verification?▼

Pipeline security hardening supports dependency pinning and artifact verification to protect your software supply chain. Enforcing these measures guarantees that only vetted dependencies are used and build outputs remain untampered.

Related Skills

Explore More Software Engineering Skills→
barrydobsonbarrydobson

github-actions

Automate secure CI/CD pipelines with GitHub Actions workflows.

Community
Intermediate
89jobrien89jobrien
4

dependency-management

Analyze dependency manifests to update packages, scan vulnerabilities, and verify licenses.

Community
Intermediate
kivo360kivo360
1

moai-domain-security

Mitigate security vulnerabilities in CI/CD pipelines using OWASP Top 10 and SAST/DAST workflows.

Community
Advanced
patricio0312revpatricio0312rev
5

artifact-sbom-publisher

Generate SBOMs and publish artifacts with provenance metadata in CI/CD pipelines.

Community
Advanced