Harden Github Repo Security

Philipp J. Thoss

Apply GitHub repository security protections tier by tier — rulesets, read-only Actions token, secret scanning + push protection, Dependabot, and (gated) required status checks / required PR with a GitHub App bypass for a CI auto-commit bot. Mutating and confirmation-gated: always assess first, apply the no-regret baseline, then decide required checks separately.

Install

npx skills add pjt222/agent-almanac --skill harden-github-repo-security

npx skills add pjt222/agent-almanac --skill harden-github-repo-security -a claude-code -g

npx skills add pjt222/agent-almanac --skill harden-github-repo-security -a codex -g

gemini skills install https://github.com/pjt222/agent-almanac.git --path skills/harden-github-repo-security

gh skill install pjt222/agent-almanac harden-github-repo-security

git clone --depth 1 https://github.com/pjt222/agent-almanac /tmp/pjt222__agent-almanac
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/pjt222__agent-almanac/skills/harden-github-repo-security ~/.claude/skills/harden-github-repo-security   # Claude Code
cp -R /tmp/pjt222__agent-almanac/skills/harden-github-repo-security ~/.agents/skills/harden-github-repo-security   # Codex, Cursor, Gemini CLI, Copilot, OpenCode

Install

Related