Packer templates to create hardened Ubuntu server images.
This repository also configures its own agents. See what hardened-images tells them →
Skill Claude CodeCodex
Reviews and modifies Ansible roles, collections, playbooks, and tasks, verified through the target repository's own lint/test loop rather than declaring success from the edit alone. Use when reviewing or modifying any Ansible role, collection, playbook, or task.
Skill Claude CodeCodex
Authors, reviews, and hardens Bash scripts for the stability and security properties a linter cannot verify on its own, including strict-mode semantics and the cases errexit ignores, cleanup and locking on every exit path, injection-safe handling of untrusted input and filenames, PATH and environment control…
Skill Claude CodeCodex
Adds or updates bats-core, shunit2, or plain-script test coverage for a Bash change by first discovering the repository's existing test layout and conventions, matching them rather than imposing a new framework, deciding whether the change requires a test at all, making a script testable by separating logic into…
Skill Claude CodeCodex
Authors, reviews, and hardens GitHub Actions workflows, reusable workflows, and composite actions with least-privilege GITHUBTOKEN permissions, action references pinned by commit SHA to the latest published release, injection-safe handling of untrusted event data, safe trigger and runner choices, and a structure that…
Skill Claude CodeCodex
Configures, reviews, and hardens GitHub organization and enterprise settings that apply across repositories, covering member privileges and base permissions, two-factor and single sign-on requirements, team-based access and periodic access reviews, GitHub App and personal access token policy, the allowed-actions and…
Skill Claude CodeCodex
Configures, reviews, and hardens the security and compliance settings of one GitHub repository, covering rulesets and branch protection, review and CODEOWNERS requirements, secret scanning with push protection, code scanning and dependency alerts, collaborator and deploy key access, tag and release protection, and the…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: