github-actions-permissions

Sterne0

Forks0

Aktualisiert27. April 2026 um 07:04

Keep GitHub Actions permissions explicit, least-privilege, and compatible with PR metadata access.

Installation

Mit Codex oder Claude installieren Kopieren Sie diesen Prompt, fügen Sie ihn in Codex, Claude oder einen anderen Assistant ein und lassen Sie die Skill-Seite prüfen und installieren.

In Manus ausführen

Quelle

onfire7777

onfire7777/five-agent-dev-team

GitHub-Repository öffnen Creator-Repositorys ansehen

Download

In Manus ausführen

Verwandte BerufeSOC

Basierend auf der SOC-Berufsklassifikation

SoftwareentwicklerInformatik- und Mathematikberufe·SOC 15-1252

SKILL.md

readonly

name	github-actions-permissions
description	Keep GitHub Actions permissions explicit, least-privilege, and compatible with PR metadata access.

GitHub Actions Permissions

Prefer workflow-level contents: read and pull-requests: read.
Add narrower job permissions only when needed.
Secret scanning must not require write permissions.
Never use pull_request_target without explicit threat modeling.

Mehr aus diesem Repository

gleiches Repository

acceptance-matrix-update

onfire7777/five-agent-dev-team

Update acceptance evidence only from verified behavior.

2026-04-270

api-contract-design

onfire7777/five-agent-dev-team

Design backend API contracts that remain stable across dashboard and worker callers.

2026-04-270

architecture-contract-authoring

onfire7777/five-agent-dev-team

Define the data, API, UI, state, security, tests, and rollback contract before queued work begins.

2026-04-270

captain-merge-gate

onfire7777/five-agent-dev-team

Enforce Captain-only merge criteria before any integration action.

2026-04-270

ci-failure-router

onfire7777/five-agent-dev-team

Classify failing checks and assign the correct specialist stage.

2026-04-270

claim-work

onfire7777/five-agent-dev-team

Acquire and release file-lane claims before mutating automation-controlled branches.

2026-04-270

Jeden Skill mit einem Klick ausführen