GitHub Actions Security Cheat Sheet

关于

This Claude Code skill provides a comprehensive, ready-to-use security reference for hardening GitHub Actions workflows against common vulnerabilities. It empowers developers to implement production-grade security measures quickly using standardized patterns for action pinning, minimal token permissions, secret management, and runner isolation. By integrating these expert-vetted snippets directly into the Claude environment, users can effectively mitigate supply chain risks and ensure their CI/CD pipelines adhere to the principle of least privilege and industry-standard security best practices.

主要功能

• 0 GitHub stars
• Workflow hardening and environment isolation techniques
• Quick-reference production-ready security snippets
• Action SHA pinning snippets for supply chain protection
• Secure secret management and handling practices
• Least-privilege token permission patterns

使用场景

• Auditing and remediating security vulnerabilities in repository environments and runners.
• Hardening existing GitHub Actions workflows to prevent supply chain attacks.
• Setting up new CI/CD pipelines with standardized minimal permission models.