github-actions-hardening

【开发与工程】Security hardening reviewer for GitHub Actions workflow files (.github/workflows/*.yml). Reasons about the Actions threat model that pattern matchers and general code linters miss — untrusted-input script injection, privileged triggers running fork code, mutable action references, and over-scoped tokens. Use this skill when asked to review, audit, ha…

独立 GitHub 快照 · 自动分类 · 以原作者文档为准