github-actions-waf
GitHub Actions CI/CD standards — SHA-pinned actions, minimal permissions, secrets handling, and reusable workflows.
Overview
| Property | Value |
|---|---|
| Type | Instruction |
| File | instructions/github-actions-waf.instructions.md |
| Applies To | **/.github/workflows/*.yml |
| WAF Alignment | security, operational-excellence |
| Lines | 151 |
How It Works
Instructions are automatically applied to files matching the applyTo glob pattern. When a developer opens a matching file in VS Code with GitHub Copilot, this instruction's content is injected into the AI context.
Source
Auto-generated from the FrootAI primitive catalog.