sarif

Securing AI skill repositories with Nvidia SkillSpector and GitHub Actions

by

Agent skills, custom instructions, and MCP configuration are becoming part of the engineering trust boundary. This post walks through using NVIDIA SkillSpector in GitHub Actions to scan AI skill repositories, surface findings in SARIF or PR comments, and make risky agent behaviour visible during normal review.

GitHub Action error Resource not accessible by integration when attempting to upload SARIF report files to GitHub

by
Screenshot showing the workflow permissions settings in GitHub Actions, with a highlight on the need to enable both read and write permissions. The image focuses on the configuration options for granting these permissions, indicating their necessity for proper workflow execution and functionality.

Just a very quick blog post to show a potential fix for GitHub Action error Resource not accessible by integration when attempting to upload SARIF report files to GitHub, I came across this when attempting to use GitHub action github/codeql-action/upload-sarif@v3 GitHub Action usage Was trying to upload a SARIF report from kube-linter with the simple … Read more