Diff GitHub Actions settings against a canonical baseline to surface drift.
npx skills add https://github.com/SocketDev/socket-mcp --skill auditing-gha
Please help me install this Agent Skill. Skill: auditing-gha Source: https://github.com/SocketDev/socket-mcp/tree/main/.claude/skills/fleet/auditing-gha Command: npx skills add https://github.com/SocketDev/socket-mcp --skill auditing-gha
Diff a fleet repository's GitHub Actions settings against the canonical baseline to surface drift and misconfigurations. Read-only: surfaces what to change, doesn't change it.
Run the auditing-gha skill against a fleet repository to detect drift in Actions permissions against the canonical baseline.
High-intent search queries and answers about installing and using this skill.
Detect GitHub Actions configuration drift by diffing per-repo Actions permissions and allowed patterns against a canonical fleet baseline, surfacing misconfigurations as human-readable findings for manual remediation.
No, you cannot automatically fix GitHub Actions permissions because this auditing process is strictly read-only; it surfaces drift and provides actionable remediation guidance but requires human review to apply changes.
The best way to audit GitHub Actions settings during onboarding is to run a read-only baseline diff that identifies per-repo overrides and misconfigurations, providing actionable guidance for manual remediation.
Yes, the GitHub Actions drift audit supports optional machine-readable output alongside human-readable findings, allowing you to integrate the surfaced policy violations into downstream automation pipelines.
You need to check GitHub Actions allowed patterns against a fleet baseline during periodic health checks and repository onboarding to identify misconfigurations and per-repo overrides that require manual remediation.
Auditing GitHub Actions drift surfaces per-repo permission overrides, deviations in allowed action patterns, and misconfigurations compared to canonical baseline patterns, all reported with actionable guidance for remediation.
SocketDevDiff GitHub Actions settings against a canonical baseline to surface drift.
djwmobleyParse pipeline findings into uniform remediation records and tracked tickets.
SocketDevIdentify and remove orphaned CI YAMLs, disable automated-security-fixes, and purge stale workflow records.
ShmurdocDetect deploy platforms and write deployment settings to CLAUDE.md.
