Audit GitHub repositories for security gaps and implement baseline hardening.
npx skills add https://github.com/zircote/.github --skill security-baseline
Please help me install this Agent Skill. Skill: security-baseline Source: https://github.com/zircote/.github/tree/main/.github/skills/security-baseline Command: npx skills add https://github.com/zircote/.github --skill security-baseline
Audit and implement security best practices for GitHub repositories, including secret scanning, dependency audits, and security hardening, to reduce risk and improve compliance.
Run a security audit across your repository to identify gaps and apply the included checklists and configurations.
High-intent search queries and answers about installing and using this skill.
Enable secret scanning in GitHub repositories by applying pre-commit hooks and integrating Gitleaks into CI pipelines. This configuration detects and prevents hardcoded credentials from being committed, reducing security risks across your codebase.
Enforce security baseline policies across multiple GitHub repos by standardizing security hygiene with automated posture checks and baseline hardening configurations. This satisfies governance requirements and ensures consistent vulnerability remediation across all repositories.
Configure Dependabot and pre-commit hooks for dependency auditing by applying the included security checklists and configurations. This setup automates dependency vulnerability remediation and validates code commits against security baseline rules before integration.
Yes, the security audit works with GitHub Actions and OIDC-based credentials by checking workflow configurations and providing guidance for secure credential management. It ensures CI pipelines meet baseline hardening requirements without exposing static secrets.
Standardize security hygiene across multiple repos by running a comprehensive security audit that automatically identifies gaps in secret scanning, dependency updates, and workflow hardening. This applies baseline configurations automatically to enforce policy compliance.
ArchitectVS7Automate GitHub Actions workflows with AI swarm coordination for CI/CD pipelines.
yjzhang2003Send structured Feishu notification cards with bug summaries and pull request links.
eleva-labsPlan security audits with checklists for dependency scanning and secret detection.
claudcherejiAutomate vulnerability scanning and compliance reporting for cloud infrastructure.
