"GitHub security compliance: dependabot, code scanning, secret scanning, branch rules, SSLL certs, and force push."
Install
npx skillscat add beer-sakthai/sak-family-agent/sakjules-github-security-compliance-program Install via the SkillsCat registry.
SKILL.md
GitHub Security & Compliance Program
Prequisites
- Repo admin access on the target repository
- Composio GitHub connection (active as
beer-sakthai)
Available Tools
| Tool | When to use |
|---|---|
GITHub_Get_A_Repository |
Read repo details and settings |
GITHub_Create_or_Update_File_Contents |
Create/modify security policy files (d/d.yml, secret scanner.config)] |
Security Compliance Features that Require Web Interface
The following features are only available through the GitHub web interface or its REST API (directly):
- Dependabot: Settings > Security > Vulnerability alerts
- Code scanning: Settings > Code security and analysis
- Secret scanning: Settings > Secrets and variables > Secret scanning
- Branch protection rules: Settings > Branches
- SSL / TLS certificates: Settings > Security > SSL authorities
Guidance
For security settings that require the web interface, provide clear instructions to the user about where to go on the repo's GitHub web page: Settings > Security > [feature].