sammyboi81

CI CD Pipeline Security — Security skill for Claude Code

Security community

Harden build pipelines - pinned actions, least-privilege tokens, OIDC, provenance, no secret exfiltration.

How to install CI CD Pipeline Security

Installs to ~/.claude/skills/sammyboi81-bulwark-mcp-ci-cd-pipeline-security/SKILL.md

Terminal

mkdir -p ~/.claude/skills/sammyboi81-bulwark-mcp-ci-cd-pipeline-security && curl -fsSL https://raw.githubusercontent.com/sammyboi81/bulwark-mcp/HEAD/skills/ci-cd-pipeline-security.md -o ~/.claude/skills/sammyboi81-bulwark-mcp-ci-cd-pipeline-security/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What CI CD Pipeline Security does

name: ci-cd-pipeline-security description: Harden build pipelines - pinned actions, least-privilege tokens, OIDC, provenance, no secret exfiltration. tags: cicd, supply-chain, core

CI is a prime target: it holds secrets and ships to production. March 2026: attackers force-pushed malicious code onto 75 of 76 version tags of the Trivy GitHub Action, stealing CI secrets while the scan still looked normal. Mutable tags are not integrity.

Pin every third-party action and image to a full co

Alternatives in Security

Harden — Run the harden skill to perform a systematic project hardening audit 1k ★
CI Audit — Stack-aware CI gap detection — audits a project's GitHub Actions workflows against its declared tech stack and 117 ★
Claude Skill Antivirus — Security scanner for Claude Code Skills — 9 engines detect malicious patterns, data exfiltration, dangerous op 64 ★