cicd-pipeline-safety

What problem does it solve?

This Skill provides guardrails and best-practice controls for GitHub Actions pipelines, helping teams enforce secure credential handling, action pinning, environment protections, and reliable checks across environments without handling deployment mechanics.

Core Features & Use Cases

• Enforce OpenID Connect-based AWS credentials and require SHA-pinning for third-party actions.
• Enforce environment-scoped secrets and branch protections to prevent production mistakes.
• Enforce required checks (type-check, unit, integration, build) in branch protection, and provide reusable guidance for workflows.
• Provide fork-prioritizing safety patterns, artifact provenance, and retention guidance to improve incident investigation.
• Offer review playbooks and safety patterns for pipeline changes, secrets, and deployment handoffs.

Quick Start

Review and apply the CI/CD pipeline safety guardrails to your GitHub Actions workflows to harden credentials, pin actions, and enforce environment protections.