# Adaptive Enforcement Lab Claude Skills Hardened CI Workflow > Hardened CI Workflow - Skill: `tomevault-io/adaptive-enforcement-lab-claude-skills-hardened-ci-workflow` (Agent Skill, multi-file: 2 files) - Install (CLI): `npx skillmds@latest add tomevault-io/adaptive-enforcement-lab-claude-skills-hardened-ci-workflow` - Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/adaptive-enforcement-lab-claude-skills-hardened-ci-workflow/raw - Safety review: pending (external: skill-scanner PASS, skillspector PASS) - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: Productivity - Author: tomevault-io (https://skillmd.com/u/tomevault-io) - Updated: 2026-09-17 - Page: https://skillmd.com/skills/tomevault-io/adaptive-enforcement-lab-claude-skills-hardened-ci-workflow --- # Hardened CI Workflow ## When to Use This Skill Copy-paste ready CI workflow templates with comprehensive security hardening. Each example demonstrates action pinning, minimal GITHUB_TOKEN permissions, input validation, and security scanning. > **Complete Security Patterns** > > > These workflows integrate all security patterns from the hub: SHA-pinned actions, job-level permissions, secret scanning prevention, fork PR safety, and security tooling. Use as production templates. ## Implementation See the full implementation guide in the [source documentation](https://adaptive-enforcement-lab.com/secure/github-actions-security/). ## Examples See [examples.md](examples.md) for code examples. ## Full Reference See [reference.md](reference.md) for complete documentation. ## References - [Source Documentation](https://adaptive-enforcement-lab.com/secure/github-actions-security/) - [AEL Secure](https://adaptive-enforcement-lab.com/secure/) --- > Source: [adaptive-enforcement-lab/claude-skills](https://github.com/adaptive-enforcement-lab/claude-skills) — distributed by [TomeVault](https://tomevault.io).