Skip to main content

github-actions-2025

Explores GitHub Actions 2025 features like 1 vCPU runners, immutable releases, and Node24 migration for enhanced automation.

Install this skill

or
70/100

Security score

The github-actions-2025 skill was audited on May 12, 2026 and we found 10 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 37

Template literal with variable interpolation in command context

SourceSKILL.md
37```yaml
medium line 58

Template literal with variable interpolation in command context

SourceSKILL.md
58```yaml
medium line 136

Template literal with variable interpolation in command context

SourceSKILL.md
136name: `Release ${tag}`,
medium line 243

Template literal with variable interpolation in command context

SourceSKILL.md
243```yaml
medium line 392

Curl to non-GitHub URL

SourceSKILL.md
392curl https://api.github.com/meta | jq '.actions_inbound'
low line 256

External URL reference

SourceSKILL.md
256url: https://app.example.com
low line 392

External URL reference

SourceSKILL.md
392curl https://api.github.com/meta | jq '.actions_inbound'
low line 485

External URL reference

SourceSKILL.md
485- [GitHub Actions 1 vCPU Runners](https://github.blog/changelog/2025-10-28-1-vcpu-linux-runner-now-available-in-github-actions-in-public-preview/)
low line 486

External URL reference

SourceSKILL.md
486- [Immutable Releases](https://github.blog/changelog/2025-08-15-github-actions-policy-now-supports-blocking-and-sha-pinning-actions/)
low line 487

External URL reference

SourceSKILL.md
487- [Node24 Migration](https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/)
Scanned on May 12, 2026
View Security Dashboard
Installation guide →