github-secure

name	github-secure
description	Configure GitHub repository security with branch protection, Dependabot, security scanning, and CI workflows. Integrates with mern-scaffold, nean-scaffold, and iOS projects.
argument-hint	[--branch main] [--reviewers auto] [--ralph-mode] [--skip-workflows]
allowed-tools	Bash, Write, Read, Glob, Grep

Purpose

Apply security best practices to a GitHub repository: branch protection, automated security scanning, dependency management, and required CI checks.

Designed to work with: /mern-scaffold, /mern-kit, /nean-scaffold, /nean-kit, and iOS projects.

Arguments

• --branch <n> — Protected branch name (default: main)
• --reviewers <n> — Required reviewers for PRs (default: auto-detect). If the repo has only 1 collaborator, defaults to 0 (solo-dev mode). Otherwise defaults to 1. Use --reviewers 0 to force solo-dev mode.
• --ralph-mode — Configure for Ralph automation (see below)
• --skip-workflows — Skip creating CI workflow files (use if existing ci.yml is sufficient)

Ralph Mode (--ralph-mode)

Configures the repository for fully autonomous Ralph operation: