starslingdev
2 Skill con documentazione sostanziale e fonti verificate. Apri una scheda per leggere le istruzioni originali e verificare pacchetto e installazione.
starslingdevci-secure
Scans a repo's GitHub Actions workflows for the ten critical CI/CD attack vectors — template injection, fork code executed with privileges (pwn requests), cache poisoning, impostor action SHAs, secrets dumps, GITHUBENV hijack, write-token untrusted triggers, credentials in caches/artifacts, unverified remote code execution (curl|bash and mutable fetch-and-run), and dependency install scripts running in a job that holds secrets — reports every finding with a plain-English attacker scenario, plus
- Installazioni / 1h
- 1
- GitHub Stars
- 42
- Aggiornato
- 22 ott
starslingdevci-speedup
Audits a repository's GitHub Actions workflows for CI optimization opportunities — missing caches, redundant setup, sleep-based readiness, long test jobs without sharding, full-history checkout, dead env vars, build-cache misconfig, and ~60 more patterns across caching, redundancy, parallelization, conditional execution, trigger scope, and hidden failures. Use when: (1) analyzing a repo's CI for optimization opportunities, (2) producing a prioritized report with measured wall-clock and runner-mi
- Installazioni / 1h
- 1
- GitHub Stars
- 42
- Aggiornato
- 22 ott