Exécutez n'importe quel Skill dans Manus
en un clic

Exécutez n'importe quel Skill dans Manus en un clic

workflow-supply-chain-maintenance

Étoiles1

Forks0

Mis à jour12 avril 2026 à 10:27

Use when editing GitHub Actions, CodeQL, Dependabot, or workflow-installed tool pins and the repo needs verified current versions and scanner scope discipline.

Installation

Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.

Exécuter dans Manus

Source

strmt7

strmt7/ome-zarr-C

Ouvrir le dépôt GitHub Voir les dépôts du créateur

Téléchargement

Exécuter dans Manus

Métiers associésSOC

Basé sur la classification professionnelle SOC

Développeurs de logicielsProfessions informatiques et mathématiques·SOC 15-1252

Explorateur de fichiers

2 fichiers

SKILL.md

readonly

name	workflow-supply-chain-maintenance
description	Use when editing GitHub Actions, CodeQL, Dependabot, or workflow-installed tool pins and the repo needs verified current versions and scanner scope discipline.
origin	repo-local, grounded in official GitHub docs and official release sources

Workflow And Supply Chain Maintenance

Use this skill before changing workflow action versions, CodeQL scope, Dependabot policy, or workflow-installed tool versions.

Rules

Verify workflow action versions from the official GitHub release source, not from examples copied out of old READMEs.
Verify Python tool versions from the canonical package index before updating pins in workflows or pyproject.toml.
Keep frozen upstream snapshot directories matching source_code_v*/ excluded from security scanning.
Prefer a dedicated CodeQL config file for scan scope and query policy so the workflow stays small and future snapshot updates have one source of truth.
Keep Dependabot enabled for every workflow/package ecosystem actually in use.

Read references/official-guidance.md before changing workflow pins, CodeQL scope, or Dependabot configuration.

Plus depuis ce dépôt

même dépôt

browser-fallback

strmt7/ome-zarr-C

Use a deterministic browser workflow only when direct fetch or extraction is insufficient for a public-web task.

2026-04-171

verification-loop

strmt7/ome-zarr-C

Run the smallest correct verification lane and report it precisely.

2026-04-171

compliance-and-rate-limit

strmt7/ome-zarr-C

Keep public-web research compliant, bounded, and efficient through rule checks, caching, and backoff instead of evasive scraping.

2026-04-171

cpp-performance-optimization

strmt7/ome-zarr-C

Optimize a parity-proven ome-zarr native C++ surface for measurable speedups by improving data layout, copies, cache behavior, and boundary design without changing behavior.

2026-04-171

benchmark-first

strmt7/ome-zarr-C

Benchmark converted code against the frozen upstream implementation before making performance claims.

2026-04-171

cpp-parity-porting

strmt7/ome-zarr-C

Port one upstream ome-zarr-py surface to standalone native C++ without touching the frozen snapshot.

2026-04-161

name	workflow-supply-chain-maintenance
description	Use when editing GitHub Actions, CodeQL, Dependabot, or workflow-installed tool pins and the repo needs verified current versions and scanner scope discipline.
origin	repo-local, grounded in official GitHub docs and official release sources

Workflow And Supply Chain Maintenance

Use this skill before changing workflow action versions, CodeQL scope, Dependabot policy, or workflow-installed tool versions.

Rules

Verify workflow action versions from the official GitHub release source, not from examples copied out of old READMEs.
Verify Python tool versions from the canonical package index before updating pins in workflows or pyproject.toml.
Keep frozen upstream snapshot directories matching source_code_v*/ excluded from security scanning.
Prefer a dedicated CodeQL config file for scan scope and query policy so the workflow stays small and future snapshot updates have one source of truth.
Keep Dependabot enabled for every workflow/package ecosystem actually in use.

Read references/official-guidance.md before changing workflow pins, CodeQL scope, or Dependabot configuration.