github-actions-waf

GitHub Actions CI/CD standards — SHA-pinned actions, minimal permissions, secrets handling, and reusable workflows.

Overview

Property	Value
Type	Instruction
File	`instructions/github-actions-waf.instructions.md`
Applies To	`*/.github/workflows/.yml`
WAF Alignment	`security`, `operational-excellence`
Lines	151

How It Works

Instructions are automatically applied to files matching the applyTo glob pattern. When a developer opens a matching file in VS Code with GitHub Copilot, this instruction’s content is injected into the AI context.

Source

GitHub: instructions/github-actions-waf.instructions.md

Auto-generated from the FrootAI primitive catalog .