Execute qualquer Skill no Manus
com um clique

Execute qualquer Skill no Manus com um clique

workflow-supply-chain-maintenance

Estrelas1

Forks0

Atualizado12 de abril de 2026 às 10:27

Use when editing GitHub Actions, CodeQL, Dependabot, or workflow-installed tool pins and the repo needs verified current versions and scanner scope discipline.

Instalação

Instalar com Codex ou Claude Copie este prompt, cole no Codex, Claude ou outro assistente e deixe que ele revise a página da skill e instale para você.

Executar no Manus

Fonte

strmt7

strmt7/ome-zarr-C

Abrir repositório GitHub Ver repositórios do creator

Download

Executar no Manus

Ocupações relacionadasSOC

Baseado na classificação ocupacional SOC

Desenvolvedores de softwareInformática e Matemática·SOC 15-1252

Explorador de arquivos

2 arquivos

SKILL.md

readonly

name	workflow-supply-chain-maintenance
description	Use when editing GitHub Actions, CodeQL, Dependabot, or workflow-installed tool pins and the repo needs verified current versions and scanner scope discipline.
origin	repo-local, grounded in official GitHub docs and official release sources

Workflow And Supply Chain Maintenance

Use this skill before changing workflow action versions, CodeQL scope, Dependabot policy, or workflow-installed tool versions.

Rules

Verify workflow action versions from the official GitHub release source, not from examples copied out of old READMEs.
Verify Python tool versions from the canonical package index before updating pins in workflows or pyproject.toml.
Keep frozen upstream snapshot directories matching source_code_v*/ excluded from security scanning.
Prefer a dedicated CodeQL config file for scan scope and query policy so the workflow stays small and future snapshot updates have one source of truth.
Keep Dependabot enabled for every workflow/package ecosystem actually in use.

Read references/official-guidance.md before changing workflow pins, CodeQL scope, or Dependabot configuration.

Mais deste repositório

mesmo repositório

browser-fallback

strmt7/ome-zarr-C

Use a deterministic browser workflow only when direct fetch or extraction is insufficient for a public-web task.

2026-04-171

verification-loop

strmt7/ome-zarr-C

Run the smallest correct verification lane and report it precisely.

2026-04-171

compliance-and-rate-limit

strmt7/ome-zarr-C

Keep public-web research compliant, bounded, and efficient through rule checks, caching, and backoff instead of evasive scraping.

2026-04-171

cpp-performance-optimization

strmt7/ome-zarr-C

Optimize a parity-proven ome-zarr native C++ surface for measurable speedups by improving data layout, copies, cache behavior, and boundary design without changing behavior.

2026-04-171

benchmark-first

strmt7/ome-zarr-C

Benchmark converted code against the frozen upstream implementation before making performance claims.

2026-04-171

cpp-parity-porting

strmt7/ome-zarr-C

Port one upstream ome-zarr-py surface to standalone native C++ without touching the frozen snapshot.

2026-04-161

name	workflow-supply-chain-maintenance
description	Use when editing GitHub Actions, CodeQL, Dependabot, or workflow-installed tool pins and the repo needs verified current versions and scanner scope discipline.
origin	repo-local, grounded in official GitHub docs and official release sources

Workflow And Supply Chain Maintenance

Use this skill before changing workflow action versions, CodeQL scope, Dependabot policy, or workflow-installed tool versions.

Rules

Verify workflow action versions from the official GitHub release source, not from examples copied out of old READMEs.
Verify Python tool versions from the canonical package index before updating pins in workflows or pyproject.toml.
Keep frozen upstream snapshot directories matching source_code_v*/ excluded from security scanning.
Prefer a dedicated CodeQL config file for scan scope and query policy so the workflow stays small and future snapshot updates have one source of truth.
Keep Dependabot enabled for every workflow/package ecosystem actually in use.

Read references/official-guidance.md before changing workflow pins, CodeQL scope, or Dependabot configuration.