Can it help me migrate from GPG to SSH commit signing?

Absolutely. It provides comprehensive setup and configuration steps for modern SSH-based commit verification as a simpler alternative to GPG.

What secret scanning tools are supported?

The skill provides implementation guidance for GitHub Secret Scanning, Gitleaks, and git-secrets to identify and block leaked credentials.

Does this skill support Windows development?

Yes, it strictly enforces backslash file path requirements to ensure full compatibility and prevent errors on Windows systems.

How does it handle documentation updates?

To maintain repository cleanliness, the skill follows a policy of updating existing README files rather than creating new markdown files, unless specifically requested.

Git Security 2025

Name: Git Security 2025
Author: JosiahSiegel

byJosiahSiegel

•

安全与测试

Enforces modern Git security protocols including signed commits, zero-trust workflows, and proactive secret scanning.

关于

The Git Security 2025 skill equips Claude with specialized knowledge to implement industry-standard security measures within your version control system. It focuses on the 'Zero-Trust' model, guiding users through mandatory GPG/SSH commit signing, identity verification, and automated secret detection using tools like Gitleaks. Additionally, it enforces strict Windows-specific file path formatting and maintains repository cleanliness by prioritizing existing documentation updates over creating new files.

主要功能

Optimized Windows compatibility with mandatory backslash path handling
Automated secret scanning and prevention using Gitleaks and GitHub tools
Enforcement of secure branch protection and pre-receive hooks
Configuration of GPG and SSH commit signing for identity verification
7 GitHub stars
Implementation of Zero-Trust security models for Git workflows

使用场景

Transitioning a legacy repository to a mandatory signed-commit workflow
Configuring enterprise-grade branch protection rules for sensitive production code
Auditing a project for exposed secrets and setting up preventative scanning hooks

关于

主要功能

Optimized Windows compatibility with mandatory backslash path handling
Automated secret scanning and prevention using Gitleaks and GitHub tools
Enforcement of secure branch protection and pre-receive hooks
Configuration of GPG and SSH commit signing for identity verification
7 GitHub stars
Implementation of Zero-Trust security models for Git workflows

使用场景

Transitioning a legacy repository to a mandatory signed-commit workflow
Configuring enterprise-grade branch protection rules for sensitive production code
Auditing a project for exposed secrets and setting up preventative scanning hooks