Security · Skill set · 2 skills
Sentry security checks
Review GitHub Actions workflows for exploitable patterns and find secrets that leak through serializers and generated output.
Open in PhởSkills in this set
- GitHub Actions Security Review
GitHub Actions security review for workflow exploitation vulnerabilities. Use when asked to "review GitHub Actions", "audit workflows", "check CI security", "GHA security"…
- Secret Serialization Review
Finds secrets, tokens, passwords, and API keys that can leak through generated serialization: Python dataclass repr and asdict, attrs, pydantic model_dump, NamedTuple, JavaScript…
Other security sets
Frequently asked questions
What is in the Sentry security checks skill set?
2 skills: GitHub Actions Security Review, Secret Serialization Review.
Is the Sentry security checks skill set free?
Yes. It is published by Sentry under the Apache 2.0 licence and works with a free Phở account.
How do I add Sentry security checks to Phở?
Press Open in Phở and add the set once. From then on Phở picks the right skill from it whenever a request matches.
Copied unchanged from getsentry/skills at commit 0c464f4 and credited to Sentry, who is not affiliated with Phở. The full instructions and licence text ship with the skill inside Phở.