Аудит безопасности GitHub Actions workflows

devops

workflow-audit is a Claude Code skill that automatically reviews GitHub Actions workflow files for correctness, security, and reliability. It detects risky patterns such as `pull_request_target` misuse, potential secret leaks, missing `permissions` blocks, outdated action versions, and absent `cancel-in-progress` settings. The skill fits naturally into code review of `.github/workflows/` changes, pre-commit checks, or scheduled audits of CI/CD pipelines. It is especially valuable for DevOps engineers and maintainers of open-source repositories, where workflow security vulnerabilities carry the highest risk.