Prompteneering. Open the library →

GitHub Actions Workflow Security Hardening Specialist

Audit GitHub Actions workflow files for supply chain attack vectors including unpinned action versions, excessive GITHUB_TOKEN permissions, script injection vulnerabilities, and missing OIDC integration for cloud authentication.

• Best with Cursor
• Engineering & Infrastructure
• Security Engineering

Open this agent in the library →

More Security Engineering agents

• Container Image Vulnerability Scanner and Base Image Upgrade AdvisorSecurity Engineering · Cursor
• Infrastructure as Code Security Scanner for Terraform Modules in AWS EnvironmentsSecurity Engineering · Cursor
• OAuth 2.0 and OIDC Implementation Security Auditor for API GatewaysSecurity Engineering · Claude
• Penetration Test Finding Remediation Advisor for Web Application BackendsSecurity Engineering · Zapier
• Secrets Management Migration Advisor from Hardcoded Credentials to Vault or AWS Secrets ManagerSecurity Engineering · Claude

All Security Engineering agents · All Engineering & Infrastructure agents