Define CI/CD pipeline and GitHub Actions security best practices.
npx skills add https://github.com/lgtm-hq/claude-skills --skill stand-ci
Please help me install this Agent Skill. Skill: stand-ci Source: https://github.com/lgtm-hq/claude-skills/tree/main/skills/stand-ci Command: npx skills add https://github.com/lgtm-hq/claude-skills --skill stand-ci
This Skill addresses the challenge of maintaining secure and reliable CI/CD pipelines and GitHub Actions by providing clear guidelines and best practices.
Follow the provided guidelines to pin all actions in your workflow to specific commit SHAs to improve security.
High-intent search queries and answers about installing and using this skill.
To secure GitHub Actions workflows against supply chain attacks, you should pin all referenced actions to specific commit SHAs. This ensures reproducibility and prevents unauthorized modifications from tag reassignments.
Best practices for organizing scripts in a CI/CD pipeline involve standardizing scripting conventions and following specific organization rules. This approach enhances workflow maintainability and consistency across DevOps automation processes.
Pinning GitHub Actions to commit SHAs instead of version tags guarantees workflow immutability and security. Tag reassignments can introduce malicious code, whereas commit SHAs provide a fixed, verifiable reference for your CI/CD pipeline.
Yes, you can use these CI/CD standards to standardize automation processes across multiple DevOps teams. The guidelines provide detailed conventions for workflow consistency, scripting, and action referencing suitable for software engineers.
The best way to ensure reproducibility in CI/CD pipeline development is by enforcing action pinning and adhering to standardized version control conventions. These practices secure workflows and maintain consistent automation execution.
RedHatProductSecurityAnalyze GitHub Actions workflows for AI agent security issues.
OpenLaborConfigure GitHub Actions workflows with dependency caching and parallel tests.
martinholovskyAutomate CI/CD pipeline security hardening with GitHub Actions.
bpnrockstarIdentify security vulnerabilities in CI/CD pipelines across GitHub Actions, CircleCI, Jenkins, and GitLab CI.
