# Adaptive Enforcement Lab Claude Skills Hardened Deployment Workflow > Hardened Deployment Workflow - Skill: `tomevault-io/adaptive-enforcement-lab-claude-skills-hardened-deployment-w` (Agent Skill, multi-file: 2 files) - Install (CLI): `npx skillmds@latest add tomevault-io/adaptive-enforcement-lab-claude-skills-hardened-deployment-w` - Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/adaptive-enforcement-lab-claude-skills-hardened-deployment-w/raw - Safety review: pending (external: skill-scanner PASS, skillspector PASS) - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: Productivity - Author: tomevault-io (https://skillmd.com/u/tomevault-io) - Updated: 2026-09-17 - Page: https://skillmd.com/skills/tomevault-io/adaptive-enforcement-lab-claude-skills-hardened-deployment-w --- # Hardened Deployment Workflow ## When to Use This Skill Copy-paste ready deployment workflow templates with comprehensive security hardening. Each example demonstrates OIDC authentication, environment protection, approval gates, zero-downtime deployments, and automated rollback patterns. > **Complete Security Patterns** > > > These workflows integrate all security patterns from the hub: OIDC federation (no stored secrets), environment protection with approval gates, SHA-pinned actions, minimal GITHUB_TOKEN permissions, deployment verification, and automated rollback. Use as production templates for secure deployments. ## Implementation See the full implementation guide in the [source documentation](https://adaptive-enforcement-lab.com/secure/github-actions-security/). ## Key Principles Every deployment workflow in this guide implements these controls: 1. **OIDC Authentication**: Secretless cloud authentication with short-lived tokens 2. **Environment Protection**: Required reviewers and wait timers for production 3. **Minimal Permissions**: `id-token: write` for OIDC, `contents: read` by default 4. **Approval Gates**: Human review before production deployment 5. **Deployment Verification**: Health checks after deployment 6. **Rollback Automation**: Automatic rollback on failure 7. **Audit Trail**: Deployment tracking and change logs ## Full Reference See [reference.md](reference.md) for complete documentation. ## References - [Source Documentation](https://adaptive-enforcement-lab.com/secure/github-actions-security/) - [AEL Secure](https://adaptive-enforcement-lab.com/secure/) --- > Converted and distributed by [TomeVault](https://tomevault.io/claim/adaptive-enforcement-lab) — claim your Tome and manage your conversions.