Skip to content
aarness.
Marketplace

Skill

GitHub Actions Hardening

Reviews workflow YAML for script injection, privileged triggers running fork code, unpinned actions and over-broad token scopes.

Haarnessverifiedsecuritygithub actionsci securityworkflow injectionsha pinningpermissions
InstallAdd to a workspace

Install

  1. 1

    Get Haarness

    Free and open source. Skip this step if Haarness is already on your computer.

    Download for macOSor
    curl -fsSL https://haarness.ai/install.sh | sh

    Free and open source. Skip this step if Haarness is already on your computer.

    Download for Windowsor
    irm https://haarness.ai/install.ps1 | iex

    Free and open source. Skip this step if Haarness is already on your computer.

    Download for Linuxor
    curl -fsSL https://haarness.ai/install.sh | sh

    Haarness installs on a computer. Open this page there to continue, or use it in the cloud below.

    Haarness installs on a computer. Open this page there to continue, or use it in the cloud below.

    Haarness installs on a computer. Open this page there to continue, or use it in the cloud below.

    Haarness installs on a computer. Open this page there to continue, or use it in the cloud below.

  2. 2

    Add GitHub Actions Hardening

    Run this in a terminal. Add --global to install for every project, or --local for this project only.

    haarness marketplace install skill haarness/github-actions-hardening

Notes

From github/awesome-copilot (skills/github-actions-hardening), by github. Licence: MIT. Haarness keeps it in sync with the repository; installs update themselves.

Details

Publisher
Haarness
Version
v1
License
MIT
Visibility
public
Updated
Source
github.com/github/awesome-copilotskills/github-actions-hardening · mainKept in sync · b6483db

Versions

  • v1