GitHub Actions Hardening
Independent PiSkill directory guide. The original skill remains hosted by GitHub Awesome Copilot.
What is GitHub Actions Hardening?
Hardens GitHub Actions workflows by reviewing permissions, untrusted input, action pinning, secret handling, script injection, artifacts, and dependency boundaries.
Compatible tools
Related skills
Azure Identity for TypeScript
Implements Azure Identity credentials in TypeScript applications with environment-aware authentication, managed identity, credential chains, token scopes, errors, and secure deployment practices.
Firebase Authentication
Implements Firebase Authentication with appropriate providers, client and server flows, session handling, authorization boundaries, emulator use, and production checks.
Firebase Security Rules Auditor
Audits Firestore and Storage security rules for overbroad access, missing ownership checks, unsafe validation, query mismatches, and untested authorization paths.
Google Cloud Security Command Center Query
Queries Security Command Center findings with explicit organization, project, resource, category, severity, state, and time constraints for security investigations.
Stripe Connect Verification Requirements
Determines required Stripe Connect verification information for a documented account country, business type, capabilities, dashboard, and service agreement configuration.
Vercel CLI with Tokens
Uses Vercel CLI authentication tokens safely in automation, CI, and non-interactive deployment workflows without embedding credentials in source code.