Identify security weaknesses in GitHub Actions workflow YAML files.
npx skills add https://github.com/superagent-ai/skills --skill ci-cd-security-superagent-ai
Please help me install this Agent Skill. Skill: ci-cd-security Source: https://github.com/superagent-ai/skills/tree/main/skills/ci-cd-security Command: npx skills add https://github.com/superagent-ai/skills --skill ci-cd-security-superagent-ai
This Skill analyzes GitHub Actions workflow YAML to identify security weaknesses by applying a comprehensive rule set, delivering actionable findings and safe rewrites.
Paste or upload a workflow file to scan for CI/CD security findings and receive a recommended rewrite.
High-intent search queries and answers about installing and using this skill.
Scan GitHub Actions workflow YAML for security vulnerabilities by applying a comprehensive rule set that detects dangerous triggers, improper permissions, and insecure patterns, delivering prioritized findings with safe rewrites.
CI/CD pipelines often contain security weaknesses like dangerous triggers, improper permissions, and insecure patterns. A rule-based scan identifies these gaps and provides concrete rewrite suggestions to harden the pipeline.
No external security tools are needed to audit GitHub Actions workflows. This approach reads YAML locally, requires no additional dependencies, and outputs actionable findings with severity ratings for pipeline hardening.
Harden CI/CD workflows for open source security reviews by scanning workflow files to identify weaknesses. The process outputs prioritized findings with severity ratings and safe rewrites to secure pipelines before code merges.
Yes, you can get automated rewrite suggestions for insecure GitHub Actions YAML. The scan delivers actionable outputs with concrete, safe rewrites to fix detected security gaps and harden your CI/CD pipelines.
mvillmowValidate GitHub Actions workflow files for syntax and best practices.
mr-daedaliumMerge PRs, trigger deployment, and verify canary health in CI/CD pipelines.
rnavarychAutomate security testing with Snyk, Semgrep, Gitleaks, and OWASP ZAP in CI/CD pipelines.
alxayoDetect security misconfigurations and compliance violations in Infrastructure as Code.
