Gh Actions Validator

Overview

Validate and harden GitHub Actions workflows that deploy to Google Cloud (especially Vertex AI) using Workload Identity Federation (OIDC) instead of long-lived service account keys. Use this to audit existing workflows, propose a secure replacement, and add CI checks that prevent common credential and permission mistakes.

Prerequisites

Before using this skill, ensure:

• GitHub repository with Actions enabled
• Google Cloud project with billing enabled
• gcloud CLI authenticated with admin permissions
• Understanding of Workload Identity Federation concepts
• GitHub repository secrets configured
• Appropriate IAM roles for CI/CD automation

Instructions