review-agentic-workflows

O que a skill ensina

A review skill from GitHub's gh-aw project for changes to agentic workflow files under .github/workflows and the .lock.yml files compiled from them. The agent checks that the gh aw CLI extension is installed, limits the review to changed workflows, compiles them in strict mode with scanners such as actionlint, zizmor, poutine and shellcheck, and flags edits that weaken protections, such as broader permissions, unpinned actions or wider network access. When run IDs are available it audits recent runs and logs to suggest cost and reliability fixes. Each revision gets exactly one read-only security reviewer.

O que faz

Detalhes