Skip to content

v0.7.0

Choose a tag to compare

View all tags
@swannysec swannysec released this 21 Feb 19:35
· 48 commits to main since this release
v0.7.0
28d3794
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

New skills: gh-aw-helper, gha-hardening

gh-aw-helper (workflow-toolkit 0.6.0)

GitHub Agentic Workflows (gh-aw) — write AI-powered automation in natural-language markdown that compiles to secure GitHub Actions. Covers setup, workflow authoring, triggers, safe I/O, security, MCP tools, 14 operational patterns, engine configuration, and troubleshooting.

gha-hardening (security-toolkit 0.2.0)

GitHub Actions security hardening and configuration best practices. Covers workflow permissions, secrets, OIDC, attack patterns (injection, pwn requests, supply chain), detection tools (zizmor, scorecard, poutine, actionlint, harden-runner), runner security, and incident response.

Housekeeping

  • Moved gha-hardening from workflow-toolkit to security-toolkit (correct home for a security skill)
  • Updated all manifests, READMEs, and keywords

Full changelog: v0.6.4...v0.7.0

Assets 2
Loading