メニュー
Use when editing GitHub Actions, CodeQL, Dependabot, or workflow-installed tool pins and the repo needs verified current versions and scanner scope discipline.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
| name | workflow-supply-chain-maintenance |
| description | Use when editing GitHub Actions, CodeQL, Dependabot, or workflow-installed tool pins and the repo needs verified current versions and scanner scope discipline. |
| origin | repo-local, grounded in official GitHub docs and official release sources |
Use this skill before changing workflow action versions, CodeQL scope, Dependabot policy, or workflow-installed tool versions.
pyproject.toml.source_code_v*/ excluded
from security scanning.Read references/official-guidance.md before changing workflow pins, CodeQL
scope, or Dependabot configuration.
Use a deterministic browser workflow only when direct fetch or extraction is insufficient for a public-web task.
Run the smallest correct verification lane and report it precisely.
Keep public-web research compliant, bounded, and efficient through rule checks, caching, and backoff instead of evasive scraping.
Optimize a parity-proven ome-zarr native C++ surface for measurable speedups by improving data layout, copies, cache behavior, and boundary design without changing behavior.
Benchmark converted code against the frozen upstream implementation before making performance claims.
Port one upstream ome-zarr-py surface to standalone native C++ without touching the frozen snapshot.