developer-security

O que a skill ensina

A security reference for contributors to gh-aw, covering both the workflows it generates and its Go code. Topics include preventing template injection in GitHub Actions expressions, handling values that may be empty across different triggers, writing safe shell scripts, supply chain hardening, workflow structure and permissions, connecting static analysis tools and how to report review findings. An agent uses it when building or reviewing gh-aw features.

O que faz

Detalhes