Hardens GitHub Actions workflows against supply chain attacks, credential theft, and privilege escalation: pinning actions to SHA digests, minimizing GITHUB_TOKEN permissions, protecting secrets, preventing script injection in workflow expressions, and requiring reviewers for workflow changes.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill securing-github-actions-workflowsnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill securing-github-actions-workflows -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill securing-github-actions-workflows -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/securing-github-actions-workflowsgh skill install mukul975/Anthropic-Cybersecurity-Skills securing-github-actions-workflowsgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/securing-github-actions-workflows ~/.claude/skills/securing-github-actions-workflows # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/securing-github-actions-workflows ~/.agents/skills/securing-github-actions-workflows # Codex, Cursor, Gemini CLI, Copilot, OpenCode