Security-hardening skill for CI/CD pipelines and pre-commit hooks. Scans codebases to detect missing security infrastructure and generates configurations. Use when:
(1) Setting up CI/CD for a new project ("add CI", "setup GitHub Actions", "create workflow")
(2) Adding pre-commit hooks ("add husky", "setup pre-commit", "add git hooks")
(3) Security hardening ("add SAST", "setup CodeQL", "add dependabot", "security scan")
(4) Auditing existing CI/CD ("check my workflows", "what security am I missing")
(5) Adding commit standards ("add commitlint", "enforce conventional commits")
Triggers: "CI/CD", "GitHub Actions", "pre-commit", "husky", "CodeQL", "Semgrep", "dependabot", "SAST", "security scanning", "lint-staged", "commitlint", "git hooks"