sc-ci-cd

Detect CI/CD security weaknesses in GitHub Actions and GitLab CI workflows.

7|Updated Apr 9, 2026

Search Tags:#devops #security #vulnerability #github-actions #ci-cd #pipeline-security

One-click install

npx skills add https://github.com/fatihkan/badi --skill sc-ci-cd-fatihkan

Or copy as Structured Prompt for Agent▼

Please help me install this Agent Skill.
Skill: sc-ci-cd
Source: https://github.com/fatihkan/badi/tree/main/.claude/skills/security-check/sc-ci-cd
Command: npx skills add https://github.com/fatihkan/badi --skill sc-ci-cd-fatihkan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

CI/CD pipelines often expose sensitive data and introduce security vulnerabilities through misconfigurations, expression injections, untrusted actions, and insecure artifact handling. This skill provides automated checks and guidance to harden GitHub Actions, GitLab CI, and related pipelines.

Core Features & Use Cases

Detects common CI/CD security weaknesses in GitHub Actions and GitLab CI configurations (expression injection, PR checkout risks, untrusted actions, secret exposure).
Enforces best practices like pinning actions, minimal permissions, and secure artifact handling across CI pipelines.
Provides actionable remediation guidance and standardized output for security findings.

Quick Start

Run a security scan on your repository's CI/CD workflows to reveal actionable remediation guidance.

Frequently Asked Questions about sc-ci-cd

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan GitHub Actions workflows for CI/CD security vulnerabilities?▼

To detect CI/CD pipeline security weaknesses, scan your GitHub Actions workflows for expression injections, untrusted actions, and secret exposure in logs. This skill automates these checks and produces structured findings with actionable remediation guidance.

What are common CI/CD pipeline security misconfigurations in GitLab CI?▼

Common CI/CD pipeline security misconfigurations include expression injections, PR checkout risks, untrusted actions, and secret exposure in logs. This skill detects these weaknesses across GitLab CI and GitHub Actions to enforce minimal permissions and secure artifact handling.

Does this CI/CD pipeline security check work with both GitHub Actions and GitLab CI?▼

Yes, CI/CD pipeline security scanning works with GitHub Actions and GitLab CI configurations. It evaluates repository workflows, PR pipelines, and deployment sequences across both platforms to identify privilege escalation and insecure artifact handling.

How do I prevent expression injection and secret exposure in repository workflows?▼

Preventing expression injection and secret exposure in repository workflows requires applying minimal permissions and secure artifact handling. This skill identifies these specific CI/CD risks and provides structured remediation guidance to enforce pipeline security best practices.

What is the best way to enforce minimal permissions for untrusted actions in PR pipelines?▼

The best way to enforce minimal permissions for untrusted actions in PR pipelines is to scan configurations for privilege escalation and insecure references. This skill detects untrusted actions and outputs standardized findings to help you harden your CI/CD pipelines.