Ejecuta cualquier Skill en Manus
con un clic

Ejecuta cualquier Skill en Manus con un clic

workflow-supply-chain-maintenance

Estrellas1

Forks0

Actualizado12 de abril de 2026 a las 10:27

Use when editing GitHub Actions, CodeQL, Dependabot, or workflow-installed tool pins and the repo needs verified current versions and scanner scope discipline.

Instalación

Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.

Ejecutar en Manus

Fuente

strmt7

strmt7/ome-zarr-C

Abrir repositorio de GitHub Ver repositorios del creador

Descarga

Ejecutar en Manus

Ocupaciones relacionadasSOC

Basado en la clasificación ocupacional SOC

Desarrolladores de softwareOcupaciones informáticas y matemáticas·SOC 15-1252

Explorador de archivos

2 archivos

SKILL.md

readonly

name	workflow-supply-chain-maintenance
description	Use when editing GitHub Actions, CodeQL, Dependabot, or workflow-installed tool pins and the repo needs verified current versions and scanner scope discipline.
origin	repo-local, grounded in official GitHub docs and official release sources

Workflow And Supply Chain Maintenance

Use this skill before changing workflow action versions, CodeQL scope, Dependabot policy, or workflow-installed tool versions.

Rules

Verify workflow action versions from the official GitHub release source, not from examples copied out of old READMEs.
Verify Python tool versions from the canonical package index before updating pins in workflows or pyproject.toml.
Keep frozen upstream snapshot directories matching source_code_v*/ excluded from security scanning.
Prefer a dedicated CodeQL config file for scan scope and query policy so the workflow stays small and future snapshot updates have one source of truth.
Keep Dependabot enabled for every workflow/package ecosystem actually in use.

Read references/official-guidance.md before changing workflow pins, CodeQL scope, or Dependabot configuration.

Más de este repositorio

mismo repositorio

browser-fallback

strmt7/ome-zarr-C

Use a deterministic browser workflow only when direct fetch or extraction is insufficient for a public-web task.

2026-04-171

verification-loop

strmt7/ome-zarr-C

Run the smallest correct verification lane and report it precisely.

2026-04-171

compliance-and-rate-limit

strmt7/ome-zarr-C

Keep public-web research compliant, bounded, and efficient through rule checks, caching, and backoff instead of evasive scraping.

2026-04-171

cpp-performance-optimization

strmt7/ome-zarr-C

Optimize a parity-proven ome-zarr native C++ surface for measurable speedups by improving data layout, copies, cache behavior, and boundary design without changing behavior.

2026-04-171

benchmark-first

strmt7/ome-zarr-C

Benchmark converted code against the frozen upstream implementation before making performance claims.

2026-04-171

cpp-parity-porting

strmt7/ome-zarr-C

Port one upstream ome-zarr-py surface to standalone native C++ without touching the frozen snapshot.

2026-04-161

name	workflow-supply-chain-maintenance
description	Use when editing GitHub Actions, CodeQL, Dependabot, or workflow-installed tool pins and the repo needs verified current versions and scanner scope discipline.
origin	repo-local, grounded in official GitHub docs and official release sources

Workflow And Supply Chain Maintenance

Use this skill before changing workflow action versions, CodeQL scope, Dependabot policy, or workflow-installed tool versions.

Rules

Verify workflow action versions from the official GitHub release source, not from examples copied out of old READMEs.
Verify Python tool versions from the canonical package index before updating pins in workflows or pyproject.toml.
Keep frozen upstream snapshot directories matching source_code_v*/ excluded from security scanning.
Prefer a dedicated CodeQL config file for scan scope and query policy so the workflow stays small and future snapshot updates have one source of truth.
Keep Dependabot enabled for every workflow/package ecosystem actually in use.

Read references/official-guidance.md before changing workflow pins, CodeQL scope, or Dependabot configuration.