git-workflow-standard — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited git-workflow-standard (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
agent 与人共用的 Git 工作流规范。完整版 + rationale 见 `references/git-workflow-standard.md`。
双层落地(见治理):本 skill 是软层(write-time 预防)。不可逆动作(直推受保护分支、force push)的最终防线是硬层——GitHub Ruleset(归 你的 IaC 仓 / IaC CTO)。两者都在,不互替。
canonical = 你的 IaC ruleset（两层 ruleset）,本 skill 镜像:
main / master / develop / dev / release/** / project/*。下面「你 MUST 做的」是 Tier 2(完整流程)仓的 SOP;Tier 1 仓只需守 §5(提交信息)+ §6(受保护分支不 force-push),其余可简化(直推 / 直接合)。本仓走 Tier 1(见 AGENTS.md)。
git switch -c <type>/<slug>(feat/ fix/ chore/ …),不在受保护分支上直接改。main/master/develop/dev/release/**/project/* 一律走 PR,MUST NOT git push 直推、MUST NOT push -f 改写其历史。git fetch,查 base 动没动(git log <branchpoint>..origin/<base> 空 = 没动)。没动 → 什么都不做(空 rebase 是 no-op,不是漏步骤);动了且碰了你改的文件 → rebase 或把 base merge 进来解冲突再 PR;动了但文件不重叠 → 可不动。并发会话下 fetch+检查必做,但"检查"≠"每次都 rebase"。--force-with-lease;受保护分支永不 force。默认 squash;可选 rebase-merge(同为线性)。merge-commit 不是 sanctioned 选项。
observability-standard 边界纪律)。references/git-workflow-standard.md~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.