GitHub Actions Hardening

Security hardening reviewer for GitHub Actions workflow files (.github/workflows/*.yml). Reasons about the Actions threat model that pattern matchers and general code linters miss — untrusted-input script injection, privileged triggers running fork code, mutable action references, and over-scoped to

Source: github.com/github/awesome-copilot/tree/main/skills/github-actions-hardening · License: MIT