Skip to content

docs: cite org-security and tag-validation references #73

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
CybotTM merged 2 commits into from
May 6, 2026
Merged

docs: cite org-security and tag-validation references #73

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
72a920e
docs: cite org-security-settings and tag-validation references
CybotTM May 6, 2026
11d8b86
chore: trim SKILL.md to fit 500-word cap
CybotTM May 6, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 12 additions & 10 deletions skills/github-project/SKILL.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,16 +16,16 @@ GitHub repository configuration, troubleshooting, and collaboration workflow bes

## When to Use

- PR won't merge, shows BLOCKED, or has unresolved review threads
- Auto-merge not working for Dependabot/Renovate PRs
- Solo maintainer needs auto-approve for their own PRs
- Branch protection, rulesets, or `enforce_admins` audit
- GitHub Actions workflow problems, CI failures, or permission issues
- Signed commit merge failures (rebase cannot be auto-signed)
- CodeQL default setup conflicts with custom workflows
- OpenSSF Scorecard improvements (token permissions, pinned deps)
- Setting up CODEOWNERS, issue templates, PR templates, or release labeling
- Fork PR merge base issues (too many commits shown)
- PR won't merge, BLOCKED, or unresolved threads
- Auto-merge fails for Dependabot/Renovate
- Solo maintainer needs auto-approve
- Branch protection, rulesets, `enforce_admins`
- GHA failures or permission issues
- Signed commit merge (rebase can't auto-sign)
- CodeQL default vs custom workflows
- OpenSSF Scorecard (token perms, pinned deps)
- CODEOWNERS, issue/PR templates, release labels
- Fork PR merge base (too many commits)

## Quick Diagnostics

Expand Down Expand Up @@ -109,6 +109,8 @@ scripts/verify-github-project.sh /path/to/repository
| Multi-repo batch ops | `references/multi-repo-operations.md` |
| Reusable workflow supply-chain trust + SHA pinning | `references/reusable-workflow-security.md` |
| Reusable workflow pitfalls (composite actions, ref caching, permissions) | `references/reusable-workflow-pitfalls.md` |
| Org-level security settings (SHA pinning) | `references/org-security-settings.md` |
| Tag validation (defense-in-depth) | `references/tag-validation.md` |

---

Expand Down
Loading