Skip to main content

Browse the directory

Showing 3 resources for "github-actions"
Saved
Active

Source-backed filter active — add entries to compare trust side by side.

Trust snapshot

3 results in this view

Claimed
0%(0/3)

2 trust signals differ in this sample: Source provenance, Submitter

Signals differ on Source provenance, Submitter — add entries to compare before you install.

Rollout signal scan

2 rollout risk signals in current results

Biggest gaps: metadata review, package integrity. 0 entries have 2+ required gaps.

3 scanned

Install payload

Install payload is broadly covered in current results.

good

100% (3/3)

Adoption queue

Browse adoption queue · balanced

0/3 visible results are ready for staged adoption under this preset.

ready 0caution 3hold 0
caution

50/100

Request metadata review from maintainers or internal owners.

Collect package checksum or signed artifact information.

skills/github-actions-security-review-capability-pack · trust review · confidence 67%

caution

50/100

Request metadata review from maintainers or internal owners.

Collect package checksum or signed artifact information.

skills/github-artifact-attestation-provenance-capability-pack · trust review · confidence 67%

Decision confidence

Decision confidence scan · balanced

0/3 results are high-confidence for the selected preset.

high 0medium 3low 0

Freshness distribution

Current results are broadly fresh

Median age 53 days; all 3 scanned entries are within 90 days.

median 53d

Aging

91–180 days

0%

0 entries

Stale

> 180 days

0%

0 entries

Theme distribution

Results center on github-actions

100% of this view shares the top theme. Leading themes: github-actions, artifact-attestations, capability-pack.

Focused

12 distinct themes across 3 scanned

GitHub logo

Expert GitHub Actions security review capability pack applying documented workflow hardening, GITHUB_TOKEN least privilege, secrets handling, and fork PR safety checks from official GitHub Actions security documentation.

Level:expertType:capability-packVerified:validated
Safety ✓ Privacy ✓
GitHub logo

Expert skill for reviewing GitHub Artifact Attestations, release artifact digests, workflow provenance, OIDC boundaries, and public release evidence before an AI agent recommends or publishes build outputs.

Level:expertType:capability-packVerified:validated
Safety ✓ Privacy ✓

Slash command that triages a failing GitHub Actions run: it pulls the failed job logs with the GitHub CLI, isolates the first real error, classifies the failure (test, lint, type, build, dependency, or flaky), and proposes a targeted, minimal fix with the exact command to reproduce it locally.

Invocation:/ci-failure-triage [run-id]
Safety ✓ Privacy ✓