github-actions-review

To automate security reviews for GitHub Actions workflows, run this skill to analyze YAML files for vulnerabilities like misconfigured secrets, action pinning issues, and script injection risks, generating actionable security reports.

The best way to optimize GitHub Actions CI/CD pipeline performance is using automated analysis to evaluate runners, caching, and concurrency, providing suggestions to enhance efficiency and reduce operational costs.

Script injection detection in GitHub Actions YAML files works by analyzing workflow scripts for misconfigured secrets and unsafe action usage, identifying vulnerabilities that could allow malicious command execution during CI/CD runs.

Yes, you can analyze GitHub Actions workflows for cost optimization automatically by evaluating resource usage and runner selection, providing insights into potential savings without manual effort.

No specific dependencies are required to check GitHub Actions for misconfigured secrets, as this skill operates independently to analyze workflow YAML files and identify security vulnerabilities.

You should review action pinning issues in CI/CD pipelines to prevent supply chain attacks, as this skill detects unpinned actions in your workflow YAML files that could introduce security vulnerabilities.