---
title: "GitHub Actions Hardening - Air Market"
description: "CI runs with real permissions, and a workflow that looks fine can still let outside code do damage. This reviews your GitHub Actions workflow files for the ways that happens - untrusted input slippin…"
canonical: "https://airmarket.ai/app/github-actions-hardening"
---

[Air Market](/) / [Security](/category/security) / GitHub Actions Hardening

Skill by [GitHub](/@github)

# GitHub Actions Hardening

Know whether your CI can be turned against you

## What this does

CI runs with real permissions, and a workflow that looks fine can still let outside code do damage. This reviews your GitHub Actions workflow files for the ways that happens - untrusted input slipping into scripts, forks running with privileges, actions you don't control, tokens with too much reach - and tells you how to lock it down.

### Top 3 things it does for you

- Review a workflow for security problems
- Explain why pull_request_target is risky here
- Pin third-party actions to a SHA

## Information

**GitHub Actions Hardening at a glance**

|  |  |
| --- | --- |
| Kind | Skill |
| Publisher | [GitHub](/@github) |
| Category | [Security](/category/security) |
| Works with | Agent Skills - an open standard supported by 40+ agents |
| Size | 23 KB |
| Licence | MIT |
| Repository | [github/awesome-copilot](https://github.com/github/awesome-copilot/tree/213aafebf9dd1c839a667ac32d13dda6b0243cc7/skills/github-actions-hardening) |
| GitHub stars | 38,187 (as of Nov 2026) |
| Installs | 2,600, counted by skills.sh (Nov 2026) |

## Security report

**Verified.** AIR scanned this exact version of GitHub Actions Hardening and flagged nothing. AIR's verdict: **safe**.

**What GitHub Actions Hardening's check was run against**

|  |  |
| --- | --- |
| Commit | 213aafebf9dd1c839a667ac32d13dda6b0243cc7 |
| Content hash | 8ce01d84909981341c2b5697eb671d92e6d1b3c6a3cff0d3d6d8ca11b20d7fa1 |
| Files read | [Browse the files at this exact commit](https://github.com/github/awesome-copilot/blob/213aafebf9dd1c839a667ac32d13dda6b0243cc7/skills/github-actions-hardening/SKILL.md) |

A scan is named by the exact content it read, not by a version number. A different version is a different artifact, and nothing here applies to a version AIR has not scanned.

[Read the full security report for GitHub Actions Hardening](/security/github-actions-hardening)

## About GitHub Actions Hardening

A security review for GitHub Actions workflow files that reasons about the Actions threat model rather than matching patterns. It covers the problems that general code linters miss: untrusted input turning into script injection, privileged triggers running code from forks, action references that can change under you, and tokens scoped wider than the job needs.

Specifically it looks at script injection through ${{ }} interpolation, privilege escalation via pull_request_target and workflow_run, SHA-pinning of third-party actions, least-privilege permissions, injection through GITHUB_ENV and GITHUB_OUTPUT, secret exposure, using OIDC instead of long-lived credentials, and self-hosted runners exposed on public repositories.

Reach for it when reviewing, auditing or hardening a workflow, when writing a new one, or for questions like whether a workflow is safe, why a particular trigger is dangerous, or how to lock down token permissions.

## What's inside

- SKILL.md - instructions
- references/injection.md - reference
- references/permissions-and-tokens.md - reference
- references/report-format.md - reference
- references/supply-chain.md - reference
- references/triggers-and-privilege.md - reference

## Questions

### Is GitHub Actions Hardening safe to install?

AIR scanned this exact version of GitHub Actions Hardening and flagged nothing. AIR's verdict: safe. The verdict is named by the content that was read, at commit 213aafebf9dd, so it cannot drift onto a version nobody scanned. The full report is at https://airmarket.ai/security/github-actions-hardening.

### How do I install GitHub Actions Hardening?

Open https://airmarket.ai/app/github-actions-hardening on Air Market and use the install action: Air Market hands Claude a prompt naming this exact skill, and Claude sets it up. Source, pinned to the exact commit this listing describes: https://github.com/github/awesome-copilot/tree/213aafebf9dd1c839a667ac32d13dda6b0243cc7/skills/github-actions-hardening. Install from that link, not the branch.

## Related on Air Market

- [More Security listings](/category/security)
- [Everything by GitHub](/@github)

---

Canonical URL: <https://airmarket.ai/app/github-actions-hardening>