harden-ci-workflows
CommunityEnhance CI/CD Security and Compliance with Hardened Workflows
Software Engineering#GitHub Actions#code integrity#supply-chain security#CI hardening#CI/CD Security
Authorjrjsmrtn
Version1.0.0
Installs0
System Documentation
What problem does it solve?
This Skill enhances the security and compliance of your GitHub Actions CI/CD workflows, protecting against supply-chain attacks, minimizing permissions, and ensuring verified toolchain usage.
Core Features & Use Cases
- Supply-Chain Security:SHA-pin actions and ensure toolchain verifications for protection against tampering and supply-chain vulnerabilities.
- Permission Minimization:Enforce least-privilege permissions to limit job write access and secure the 'GITHUB_TOKEN' and OIDC credentials.
- Verification:Validate that tools and container images are securely installed with checksums or by using pinned actions.
- Use Case:For any project adding or auditing CI workflows before going public, where a supply-chain review highlights CI vulnerabilities or when standardizing CI hardening.
Quick Start
Run the skill to harden the CI/CD workflows of your project, ensuring security measures like SHA-pinning actions, minimizing permissions, and verified toolchain installations.
Dependency Matrix
Required Modules
None requiredComponents
scriptsreferences
💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: harden-ci-workflows Download link: https://github.com/jrjsmrtn/project-orchestration-skills/archive/main.zip#harden-ci-workflows Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 620,000+ vetted skills library on demand.