ci-cd-security

What problem does it solve?

Security-focused guidance and templates to harden CI/CD pipelines using GitHub Actions, with emphasis on least privilege, pinning actions, and supply-chain controls.

Core Features & Use Cases

• Establishes least-privilege permissions for GitHub Actions workflows across builds, tests, and deployments.
• Pins actions to commit SHAs to prevent drift and ensure reproducibility.
• Integrates runner hardening, secret management, dependency reviews, and code scanning as a unified security baseline.
• Suitable for teams adopting secure SDLC practices and auditing CI/CD processes.

Quick Start

Deploy the Secure Workflow starter template to implement a secure, auditable CI/CD pipeline in your repository.