security-baseline

Audit GitHub repositories for security gaps and implement baseline hardening.

1|Updated Dec 25, 2025

Search Tags:#security #vulnerability #audit #pre-commit #gitleaks #dependabot

Ready to run

npx skills add https://github.com/zircote/.github --skill security-baseline

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-baseline
Source: https://github.com/zircote/.github/tree/main/.github/skills/security-baseline
Command: npx skills add https://github.com/zircote/.github --skill security-baseline

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audit and implement security best practices for GitHub repositories, including secret scanning, dependency audits, and security hardening, to reduce risk and improve compliance.

Core Features & Use Cases

Automated security posture checks across GitHub Actions, dependencies, and workflows.
Guidance for enabling secret scanning (Gitleaks), Dependabot, pre-commit hooks, and OIDC-based credentials.
Use cases include standardizing security hygiene across multiple repos and enforcing policy compliance.

Quick Start

Run a security audit across your repository to identify gaps and apply the included checklists and configurations.

Frequently Asked Questions about security-baseline

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit GitHub repositories for security vulnerabilities and hardcoded secrets?▼

Enable secret scanning in GitHub repositories by applying pre-commit hooks and integrating Gitleaks into CI pipelines. This configuration detects and prevents hardcoded credentials from being committed, reducing security risks across your codebase.

What is the best way to enforce security baseline policies across multiple GitHub repos?▼

Enforce security baseline policies across multiple GitHub repos by standardizing security hygiene with automated posture checks and baseline hardening configurations. This satisfies governance requirements and ensures consistent vulnerability remediation across all repositories.

How do I configure Dependabot and pre-commit hooks for dependency auditing?▼

Configure Dependabot and pre-commit hooks for dependency auditing by applying the included security checklists and configurations. This setup automates dependency vulnerability remediation and validates code commits against security baseline rules before integration.

Does this security audit work with GitHub Actions and OIDC-based credentials?▼

Yes, the security audit works with GitHub Actions and OIDC-based credentials by checking workflow configurations and providing guidance for secure credential management. It ensures CI pipelines meet baseline hardening requirements without exposing static secrets.

Can I standardize security hygiene across multiple repos without manual configuration checks?▼

Standardize security hygiene across multiple repos by running a comprehensive security audit that automatically identifies gaps in secret scanning, dependency updates, and workflow hardening. This applies baseline configurations automatically to enforce policy compliance.