# Secure

> Use when hardening GitHub Actions workflows, managing secrets or self-hosted runners, configuring OIDC or Workload Identity Federation, securing a GKE cluster, or assessing supply-chain risk.

- Skill: `adaptive-enforcement-lab/secure` (Agent Skill, multi-file: 35 files)
- Install (CLI): `npx skillmds@latest add adaptive-enforcement-lab/secure`
- Raw SKILL.md: https://api.skillmd.com/api/skills/adaptive-enforcement-lab/secure/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: adaptive-enforcement-lab (https://skillmd.com/u/adaptive-enforcement-lab)
- Updated: 2026-09-22
- Page: https://skillmd.com/skills/adaptive-enforcement-lab/secure

---


# Secure

## Overview

Finding and fixing security issues before they become incidents.

## Cloud Native
- [GKE Cluster Configuration](library/cloud-native/gke-hardening/cluster-configuration/index.md) — Private GKE cluster setup, Workload Identity…
- [GKE Security Hardening Guide](library/cloud-native/gke-hardening/index.md) — GKE security hardening guide with Pulumi.
- [IAM Configuration](library/cloud-native/gke-hardening/iam-configuration/index.md) — Least-privilege IAM roles for GKE nodes…
- [Network Security](library/cloud-native/gke-hardening/network-security/index.md) — Secure GKE networking with VPC-native IP…
- [Runtime Security](library/cloud-native/gke-hardening/runtime-security/index.md) — Pod Security Standards and admission controllers…
- [Workload Identity Federation Implementation](library/cloud-native/workload-identity/index.md) — Workload Identity Federation implementation guide.

## GitHub Actions Security Patterns Hub

Complete security patterns for GitHub Actions…
- [Action Pinning Overview](library/github-actions-security/action-pinning/index.md) — Why pinning GitHub Actions to SHA-256…
- [Complete Workflow Examples](library/github-actions-security/examples/index.md) — Copy-paste hardened CI/CD workflows with SHA-pinned…
- [Environment Protection Patterns](library/github-actions-security/workflows/environments/index.md) — Deployment protection with environment protection rules…
- [Ephemeral Runner Patterns](library/github-actions-security/runners/ephemeral/index.md) — Disposable runner patterns for GitHub Actions.
- [GITHUB_TOKEN Permissions Overview](library/github-actions-security/token-permissions/index.md) — Understanding GITHUB_TOKEN scope, default permissions, and…
- [GitHub Actions Security Cheat Sheet](library/github-actions-security/cheat-sheet/index.md) — Quick reference for GitHub Actions security…
- [Hardened CI Workflow](library/github-actions-security/examples/ci-workflow/index.md) — Production-ready CI workflow examples with all…
- [Hardened Deployment Workflow](library/github-actions-security/examples/deployment-workflow/index.md) — Production-ready deployment workflow examples with OIDC…
- [Hardened Release Workflow](library/github-actions-security/examples/release-workflow/index.md) — Production-ready release workflow examples with signed…
- [OIDC Federation Patterns](library/github-actions-security/secrets/oidc/index.md) — Secretless authentication to cloud providers using…
- [Reusable Workflow Security](library/github-actions-security/workflows/reusable/index.md) — Secure reusable workflow patterns for GitHub…
- [Runner Group Management](library/github-actions-security/runners/groups/index.md) — Runner group organization strategies for GitHub…
- [Secret Management Overview](library/github-actions-security/secrets/secrets-management/index.md) — Understanding GitHub Actions secret types, storage…
- [Secret Rotation Patterns](library/github-actions-security/secrets/rotation/index.md) — Automated secret rotation for GitHub Actions.
- [Secret Scanning Integration](library/github-actions-security/secrets/scanning/index.md) — GitHub secret scanning configuration, push protection…
- [Security Scanning Workflows](library/github-actions-security/examples/security-scanning/index.md) — Comprehensive security scanning examples with SAST…
- [Self-Hosted Runner Hardening](library/github-actions-security/runners/hardening/index.md) — Comprehensive hardening steps for self-hosted GitHub…
- [Self-Hosted Runner Security Overview](library/github-actions-security/runners/index.md) — Understanding the threat model for self-hosted…
- [Third-Party Action Risk Assessment](library/github-actions-security/third-party-actions/index.md) — Structured framework for evaluating GitHub Actions…
- [Workflow Trigger Security](library/github-actions-security/workflows/triggers/index.md) — Secure GitHub Actions trigger patterns for…

## GitHub Core App Setup

Configure organization-level GitHub Apps for secure…
- [Storing Credentials](library/github-apps/storing-credentials/index.md) — Securely store GitHub App credentials across…

## Go Security Tooling

Standard Go security toolkit: race detector…

## OpenSSF Scorecard Achievement Guide

Complete OpenSSF Scorecard achievement guide.

## Risk Management
- [Risk Prioritization Framework for Engineers](library/risk-management/engineer-framework/index.md) — Risk prioritization framework for engineers.

## Full Reference

Full text: [reference.md](reference.md). Raw sources: [library/](library/). Live: [docs](https://adaptive-enforcement-lab.com/secure/).