Hardened Release Workflows

About

The Hardened Release Workflow skill provides Claude with specialized patterns for creating secure GitHub Actions release pipelines. By integrating SLSA provenance, cryptographic artifact attestations, and SHA-pinned actions, this skill helps developers mitigate supply chain risks and ensure the authenticity of their software releases. It is designed for teams that require high-security production environments and need to implement least-privilege permissions and verifiable build trails automatically.

Key Features

• 0 GitHub stars
• Automated SLSA provenance generation for build transparency
• SHA-256 action pinning for supply chain security
• Least-privilege GITHUB_TOKEN permission configurations
• Cryptographic artifact attestations and signature verification
• Environment-based production approval gates and immutable releases

Use Cases

• Meeting enterprise compliance requirements for build integrity and transparency
• Securing open-source software releases against supply chain attacks
• Implementing immutable and verifiable software distribution pipelines