Harden Actions

Description

--- description: Pin GitHub Actions to SHAs, fix permissions, and flag dangerous triggers allowed-tools: Read, Write, Edit, Glob, Grep, Bash(git:*, gh:*, zizmor:*, pip:*, npx:*, curl:*, which:*, brew:*, cargo:*) --- Audit and harden GitHub Actions workflows for supply chain security. **This command takes action by default** - it pins Actions to commit SHAs, sets explicit permissions, and fixes script injection. Changes are explained as they are made. Read `${CLAUDE_PLUGIN_ROOT}/skills/supply-c

Installation

Installs to ~/.claude/skills/latiotech-secure-supply-chain-skills-harden-actions/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.