hardened-ci-workflow
OfficialProduction-grade hardened CI workflows.
Authoradaptive-enforcement-lab
Version1.0.0
Installs0
System Documentation
What problem does it solve?
Production-ready CI workflow templates with comprehensive security hardening. SHA pinning, minimal permissions, secret scanning, fork PR safety, and language-specific variants.
Core Features & Use Cases
- SHA-pinned actions with full commit SHAs to prevent tampering
- Job-level permissions and minimal GITHUB_TOKEN scopes
- Integrated security tooling (CodeQL, Trivy, SARIF) for automated scanning
- Production-ready templates for Node.js, Python, and language-specific ecosystems
Quick Start
Copy a hardened CI workflow into your project and adapt the language-specific variants for your repo.
Dependency Matrix
Required Modules
None requiredComponents
scripts
💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: hardened-ci-workflow Download link: https://github.com/adaptive-enforcement-lab/claude-skills/archive/main.zip#hardened-ci-workflow Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.