GitHub Actions workflow creation, security hardening, and version management for CI/CD pipelines.

• Covers workflow file authoring (.yml), action version updates via gh release view, and security best practices including secrets management and script injection prevention
• Enforces anti-patterns: outdated action versions, hardcoded credentials, input injection vulnerabilities, misuse of pull_request_target, and redundant tool setup
• Recommends minimal privilege principle, SHA pinning for untrusted actions, and environment variable isolation for sensitive data
• Includes common event triggers (push, pull_request, schedule, workflow_dispatch, release) and permission scopes for typical CI/CD workflows