github-secure

Apply branch protection, Dependabot, and security scanning to GitHub repos.

3|1|Updated Feb 12, 2026
One-click install
npx skills add https://github.com/edfenton/claude-skills --skill github-secure
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: github-secure
Source: https://github.com/edfenton/claude-skills/tree/main/shared/github-secure
Command: npx skills add https://github.com/edfenton/claude-skills --skill github-secure

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates GitHub repository security hardening by applying branch protection, Dependabot updates, and security scanning across MERN, NEAN, and iOS projects.

Core Features & Use Cases

  • Enforces branch protection rules and required reviews for PRs.
  • Configures Dependabot, Code Scanning, and secret scanning to keep dependencies secure.
  • Integrates security workflows into CI to ensure gates are respected on PRs and merges.
  • Use Case: After scaffolding a new project with /mern-scaffold or /ios-scaffold, apply this skill to standardize security settings across the repo.

Quick Start

Run the github-secure skill after scaffolding a project to apply security defaults and required CI checks.

Frequently Asked Questions about github-secure

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate GitHub repository security hardening after scaffolding a new project?

Automate GitHub repository security hardening by applying branch protection rules, configuring Dependabot security updates, and enabling secret scanning immediately after project scaffolding.

How do I configure branch protection and Dependabot for a MERN or iOS repository?

Configure branch protection and Dependabot for MERN or iOS repositories by enforcing required PR reviews, setting up dependency security updates, and integrating security scanning workflows.

Can I integrate security scanning and CI gating into my existing GitHub workflows?

Yes, you can integrate security scanning and CI gating into GitHub workflows by applying security workflow configurations that ensure gating checks are respected on PRs and merges.

What is the best way to enforce required reviews and secret scanning on GitHub PRs?

The best way to enforce required reviews and secret scanning on GitHub PRs is by applying standardized branch protection rules and enabling automated security scanning with idempotent checks.

Does this GitHub security automation work with NEAN stack projects?

Yes, this GitHub security automation works with NEAN stack projects, applying standardized security settings including version pinning and CI gating across MERN, NEAN, and iOS environments.

Why are my Dependabot security updates and branch protection rules not applying idempotently?

Dependabot security updates and branch protection rules may fail if configurations lack idempotent checks, which are required to prevent conflicts during repeated security workflow applications.