Copy-paste ready CI workflow templates with comprehensive security hardening. Each example demonstrates action pinning, minimal GITHUB_TOKEN permissions, input validation, and security scanning.
Complete Security Patterns
These workflows integrate all security patterns from the hub: SHA-pinned actions, job-level permissions, secret scanning prevention, fork PR safety, and security tooling. Use as production templates.
1---2name: adaptive-enforcement-lab-claude-skills-hardened-ci-workflow3description: Hardened CI Workflow4---56# Hardened CI Workflow78## When to Use This Skill910Copy-paste ready CI workflow templates with comprehensive security hardening. Each example demonstrates action pinning, minimal GITHUB_TOKEN permissions, input validation, and security scanning.1112> **Complete Security Patterns**13>14>15> These workflows integrate all security patterns from the hub: SHA-pinned actions, job-level permissions, secret scanning prevention, fork PR safety, and security tooling. Use as production templates.161718## Implementation1920See the full implementation guide in the [source documentation](https://adaptive-enforcement-lab.com/secure/github-actions-security/).212223## Examples2425See [examples.md](examples.md) for code examples.262728## Full Reference2930See [reference.md](reference.md) for complete documentation.31## References3233- [Source Documentation](https://adaptive-enforcement-lab.com/secure/github-actions-security/)34- [AEL Secure](https://adaptive-enforcement-lab.com/secure/)3536---37> Source: [adaptive-enforcement-lab/claude-skills](https://github.com/adaptive-enforcement-lab/claude-skills) — distributed by [TomeVault](https://tomevault.io).38<!-- tomevault:4.0:skill_md:2026-06-16 -->
Run npx skillmds@latest add tomevault-io/adaptive-enforcement-lab-claude-skills-hardened-ci-workflow in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
Hardened CI Workflow It is listed under Productivity on SkillMD.
This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
tomevault-io (@tomevault-io) published this skill. Their other Agent Skills are listed on their SkillMD profile.