القائمة
Keep GitHub Actions permissions explicit, least-privilege, and compatible with PR metadata access.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
| name | github-actions-permissions |
| description | Keep GitHub Actions permissions explicit, least-privilege, and compatible with PR metadata access. |
contents: read and pull-requests: read.pull_request_target without explicit threat modeling.Update acceptance evidence only from verified behavior.
Design backend API contracts that remain stable across dashboard and worker callers.
Define the data, API, UI, state, security, tests, and rollback contract before queued work begins.
Enforce Captain-only merge criteria before any integration action.
Classify failing checks and assign the correct specialist stage.
Acquire and release file-lane claims before mutating automation-controlled branches.