starslingdev
2 Skills con documentación sustancial y fuentes verificadas. Abre una tarjeta para leer las instrucciones originales y revisar el paquete y la instalación.
starslingdevci-secure
Scans a repo's GitHub Actions workflows for the ten critical CI/CD attack vectors — template injection, fork code executed with privileges (pwn requests), cache poisoning, impostor action SHAs, secrets dumps, GITHUBENV hijack, write-token untrusted triggers, credentials in caches/artifacts, unverified remote code execution (curl|bash and mutable fetch-and-run), and dependency install scripts running in a job that holds secrets — reports every finding with a plain-English attacker scenario, plus
- Instalaciones / 1h
- 1
- GitHub Stars
- 42
- Actualizado
- 22 oct
starslingdevci-speedup
Audits a repository's GitHub Actions workflows for CI optimization opportunities — missing caches, redundant setup, sleep-based readiness, long test jobs without sharding, full-history checkout, dead env vars, build-cache misconfig, and ~60 more patterns across caching, redundancy, parallelization, conditional execution, trigger scope, and hidden failures. Use when: (1) analyzing a repo's CI for optimization opportunities, (2) producing a prioritized report with measured wall-clock and runner-mi
- Instalaciones / 1h
- 1
- GitHub Stars
- 42
- Actualizado
- 22 oct