The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill utilizes several GitHub Actions from trusted and well-known organizations.
References standard GitHub-maintained actions such as actions/checkout@v4, actions/setup-node@v4, actions/setup-python@v5, and github/codeql-action/upload-sarif@v3.
Includes official integration actions from major service providers including AWS (aws-actions/configure-aws-credentials@v4), Docker (docker/login-action@v3, docker/build-push-action@v5), Snyk (snyk/actions/node@0.4.0), and Aqua Security (aquasecurity/trivy-action@0.28.0).
[COMMAND_EXECUTION]: The templates include standard command-line operations intended for execution within a CI/CD runner environment.
Uses dependency installation commands: npm ci and pip install -r requirements.txt.
Includes Kubernetes and AWS CLI commands for deployment: aws eks update-kubeconfig, kubectl apply, and kubectl rollout status.
These are standard workflow components and do not target the local execution environment.
[SAFE]: The skill demonstrates high security standards for workflow configuration.
Employs GitHub Secrets (${{ secrets.GITHUB_TOKEN }}, ${{ secrets.AWS_ACCESS_KEY_ID }}, etc.) to prevent credential exposure.
Advocates for and uses pinned versions for all external actions.
Includes a dedicated security scanning template using Trivy and Snyk.

github-actions-templates