detecting-supply-chain-attacks-in-ci-cd
OfficialSecure your CI/CD pipelines by detecting supply chain attacks.
Software Engineering#github-actions#supply-chain-security#security-audit#dependency-pinning#ci-cd-security
Authorbalsm-health
Version1.0.0
Installs0
System Documentation
What problem does it solve?
This Skill identifies potential supply chain attacks in GitHub Actions workflows and CI/CD pipelines, ensuring security hardening and incident investigation.
Core Features & Use Cases
- Automated Security Audit: Scans for unpinned actions, script injection, dependency confusion, and secrets exposure.
- GitHub Actions Parsing: Utilizes PyGithub and YAML parsing to audit GitHub Actions workflows.
- Use Case: When building detection rules or conducting incident response, use this Skill to automate the process of identifying vulnerabilities in your CI/CD pipelines.
Quick Start
Run the scan for supply chain attacks in your CI/CD pipeline with the command 'scan_for_supply_chain_attacks'.
Dependency Matrix
Required Modules
pypdfpdfplumberpdf2image
Components
scriptsreferences
💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: detecting-supply-chain-attacks-in-ci-cd Download link: https://github.com/balsm-health/Balsm-AI/archive/main.zip#detecting-supply-chain-attacks-in-ci-cd Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 620,000+ vetted skills library on demand.