github-actions

Name: github-actions
Availability: InStock
Author: bcgov

Implement security and operational best practices for GitHub Actions workflows.

3|Updated Jun 5, 2026

Search Tags:#devops #security #github-actions #ci #cd #bcgov

Ready to run

npx skills add https://github.com/bcgov/agent-skills --skill github-actions-bcgov

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: github-actions
Source: https://github.com/bcgov/agent-skills/tree/main/skills/github-actions
Command: npx skills add https://github.com/bcgov/agent-skills --skill github-actions-bcgov

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill addresses the challenge of ensuring secure and compliant GitHub Actions workflows by implementing best practices for security, permissions, and operational excellence.

Core Features & Use Cases

Security Hardening: Enforces best practices for security hardening, including permissions, action pinning, and runner configuration.
Operational Excellence: Provides a template for high-quality, maintainable workflows that are efficient and secure.
Use Case: If you are developing or reviewing GitHub Actions workflows within the BC Government, this Skill will help ensure your workflows adhere to security standards and operational best practices.

Quick Start

Add the github-actions skill to your repository and follow the guidelines outlined in the SKILL.md file for setting up your GitHub Actions workflows.

Frequently Asked Questions about github-actions

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I harden GitHub Actions workflows for security and compliance?▼

To harden GitHub Actions workflows, you enforce best practices for permissions management, action pinning, and runner configuration. This ensures workflows are secure, compliant, and efficient within operational environments.

What are the best practices for managing permissions in GitHub Actions CI/CD pipelines?▼

Best practices for permissions in GitHub Actions CI/CD pipelines involve strictly limiting token scopes and enforcing least privilege access. Applying these hardening patterns prevents unauthorized access and secures operational workflows.

Do I need an existing repository with GitHub Actions workflows to apply these hardening patterns?▼

Yes, you need an existing repository with GitHub Actions workflows. The hardening patterns focus on modifying and securing existing workflows by enforcing permissions management and operational excellence standards.

How do I implement action pinning and secure runner configuration in GitHub Actions?▼

Implementing action pinning and secure runner configuration involves using immutable references for actions and isolating execution environments. These security hardening patterns protect workflows from supply chain attacks and unauthorized modifications.

What is the best way to ensure maintainable and secure DevOps workflows in BC Government repositories?▼

Ensuring maintainable and secure DevOps workflows in BC Government repositories requires applying specific security hardening patterns and operational excellence templates. This approach standardizes CI/CD pipelines while maintaining strict security compliance.