Review GitHub Actions workflows for syntax, permissions, and security.
npx skills add https://github.com/crewrig/crewrig --skill github-actions-crewrig
Please help me install this Agent Skill. Skill: github-actions Source: https://github.com/crewrig/crewrig/tree/main/artifacts/core/skills/github-actions Command: npx skills add https://github.com/crewrig/crewrig --skill github-actions-crewrig
This Skill helps you author, review, debug, and harden GitHub Actions workflows without relying on guesswork. It turns CI/CD configuration into a disciplined, security-aware practice so pipelines are reproducible, least-privilege, and easier to maintain.
.github/workflows/ files with correct syntax, clean job structure, and reliable triggers.permissions, secret handling, OIDC federation, action pinning, and untrusted-input handling.Ask the assistant to review my GitHub Actions workflow for correctness, security, and best-practice improvements.
High-intent search queries and answers about installing and using this skill.
Securing GitHub Actions workflows requires applying strict least-privilege permissions, configuring OIDC federation for cloud access, and pinning action references to safe immutable versions. This approach prevents unauthorized access and ensures reproducible, hardened CI/CD pipelines.
Debugging GitHub Actions runner and caching failures involves validating safe expression handling, diagnosing matrix builds, and reviewing documented runner behavior. Analyzing these components ensures reliable workflow execution and resolves pipeline execution failures effectively.
Creating reusable GitHub Actions workflows requires defining clean job structures, correct syntax, and reliable triggers for workflow_call pipelines. Using strict permission boundaries and pinned references ensures secure, maintainable, and reproducible composite action design.
Reviewing GitHub Actions pull requests involves checking for unsafe permissions, unpinned action references, and improper untrusted-input handling. Applying disciplined security hardening validates the workflow syntax and flags vulnerable secret configurations for immediate remediation.
Yes, the GitHub Actions review process handles matrix builds and workflow_call pipelines by diagnosing failures, validating safe expression handling, and ensuring least-privilege permissions. It applies to authoring, debugging, and hardening complex reusable workflow configurations.
microwindValidate YAML configuration files for syntax, structure, and security issues.
act70255Automate GitLab CI/CD pipeline configuration with multi-stage workflows and caching.
mvillmowValidate GitHub Actions workflow files for syntax and best practices.
xxihScan Claude project configuration files for security vulnerabilities.