CI Hardening

Replicate the laststance/skills-desktop CI security baseline in a target repo. This is an implementation skill, not a vulnerability review. For exploit-focused review only, use gha-security-review.

When To Use

• User asks to strengthen GitHub Actions or .github/.
• User asks for a secure CI baseline based on skills-desktop.
• User wants CodeQL, Dependency Review, OpenSSF Scorecard, Dependabot, CODEOWNERS, PR template, or GitHub security settings.
• User wants a repo compared against the skills-desktop hardening pattern.

Workflow