GitHub Actions GCP Validator

概要

The GitHub Actions GCP Validator skill is designed to audit, harden, and automate CI/CD pipelines targeting Google Cloud Platform. It prioritizes security by replacing risky, long-lived service account keys with Workload Identity Federation (WIF) and OIDC authentication. The skill helps developers implement least-privilege IAM roles, integrate security scans, and ensure that Vertex AI deployments follow enterprise-grade best practices for automation and infrastructure safety.

主な機能

• Enforces Workload Identity Federation (WIF) to eliminate static JSON keys
• Audits GitHub Actions workflows for security vulnerabilities and credential leaks
• Validates OIDC permissions and least-privilege IAM role assignments
• Automates secure deployment patterns for Vertex AI and Cloud Run
• Integrates CI checks, secret detection, and post-deployment health monitoring
• 0 GitHub stars

ユースケース

• Securing Vertex AI agent deployments with enterprise-grade IAM and security controls
• Migrating legacy CI/CD pipelines from service account keys to secure OIDC-based authentication
• Performing security audits on existing GitHub workflows to ensure compliance with GCP best practices