Jeden Skill in Manus ausführen
mit einem Klick

Jeden Skill in Manus mit einem Klick ausführen

workflow-supply-chain-maintenance

Sterne1

Forks0

Aktualisiert12. April 2026 um 10:27

Use when editing GitHub Actions, CodeQL, Dependabot, or workflow-installed tool pins and the repo needs verified current versions and scanner scope discipline.

Installation

Mit Codex oder Claude installieren Kopieren Sie diesen Prompt, fügen Sie ihn in Codex, Claude oder einen anderen Assistant ein und lassen Sie die Skill-Seite prüfen und installieren.

In Manus ausführen

Quelle

strmt7

strmt7/ome-zarr-C

GitHub-Repository öffnen Creator-Repositorys ansehen

Download

In Manus ausführen

Verwandte BerufeSOC

Basierend auf der SOC-Berufsklassifikation

SoftwareentwicklerInformatik- und Mathematikberufe·SOC 15-1252

Datei-Explorer

2 Dateien

SKILL.md

readonly

name	workflow-supply-chain-maintenance
description	Use when editing GitHub Actions, CodeQL, Dependabot, or workflow-installed tool pins and the repo needs verified current versions and scanner scope discipline.
origin	repo-local, grounded in official GitHub docs and official release sources

Workflow And Supply Chain Maintenance

Use this skill before changing workflow action versions, CodeQL scope, Dependabot policy, or workflow-installed tool versions.

Rules

Verify workflow action versions from the official GitHub release source, not from examples copied out of old READMEs.
Verify Python tool versions from the canonical package index before updating pins in workflows or pyproject.toml.
Keep frozen upstream snapshot directories matching source_code_v*/ excluded from security scanning.
Prefer a dedicated CodeQL config file for scan scope and query policy so the workflow stays small and future snapshot updates have one source of truth.
Keep Dependabot enabled for every workflow/package ecosystem actually in use.

Read references/official-guidance.md before changing workflow pins, CodeQL scope, or Dependabot configuration.

Mehr aus diesem Repository

gleiches Repository

browser-fallback

strmt7/ome-zarr-C

Use a deterministic browser workflow only when direct fetch or extraction is insufficient for a public-web task.

2026-04-171

verification-loop

strmt7/ome-zarr-C

Run the smallest correct verification lane and report it precisely.

2026-04-171

compliance-and-rate-limit

strmt7/ome-zarr-C

Keep public-web research compliant, bounded, and efficient through rule checks, caching, and backoff instead of evasive scraping.

2026-04-171

cpp-performance-optimization

strmt7/ome-zarr-C

Optimize a parity-proven ome-zarr native C++ surface for measurable speedups by improving data layout, copies, cache behavior, and boundary design without changing behavior.

2026-04-171

benchmark-first

strmt7/ome-zarr-C

Benchmark converted code against the frozen upstream implementation before making performance claims.

2026-04-171

cpp-parity-porting

strmt7/ome-zarr-C

Port one upstream ome-zarr-py surface to standalone native C++ without touching the frozen snapshot.

2026-04-161

name	workflow-supply-chain-maintenance
description	Use when editing GitHub Actions, CodeQL, Dependabot, or workflow-installed tool pins and the repo needs verified current versions and scanner scope discipline.
origin	repo-local, grounded in official GitHub docs and official release sources

Workflow And Supply Chain Maintenance

Use this skill before changing workflow action versions, CodeQL scope, Dependabot policy, or workflow-installed tool versions.

Rules

Verify workflow action versions from the official GitHub release source, not from examples copied out of old READMEs.
Verify Python tool versions from the canonical package index before updating pins in workflows or pyproject.toml.
Keep frozen upstream snapshot directories matching source_code_v*/ excluded from security scanning.
Prefer a dedicated CodeQL config file for scan scope and query policy so the workflow stays small and future snapshot updates have one source of truth.
Keep Dependabot enabled for every workflow/package ecosystem actually in use.

Read references/official-guidance.md before changing workflow pins, CodeQL scope, or Dependabot configuration.