securing-github-actions-workflows

【开发与工程】This skill covers hardening GitHub Actions workflows against supply chain attacks, credential theft, and privilege escalation. It addresses pinning actions to SHA digests, minimizing GITHUB_TOKEN permissions, protecting secrets from exfiltration, preventing script injection in workflow expressions, and implementing required reviewers for workflow cha…

独立 GitHub 快照 · 自动分类 · 以原作者文档为准