Agent Skills: uv-supply-chain-hardening

Harden a Python project's dependency supply chain by switching Docker builds from pip to uv, pinning every dependency to the currently-installed version with hashes, and adding a release-age gate so freshly-uploaded (possibly compromised) packages can't be pulled in. Use when locking down dependencies, defending against supply-chain attacks, or migrating a Dockerized Python build from pip to uv.

ID: jmazzahacks/byteforge-claude-skills/uv-supply-chain-hardening

Install this agent skill to your local

npx skills add jmazzahacks/byteforge-claude-skills --skill uv-supply-chain-hardening

Skill Files

The files that make up uv-supply-chain-hardening.

Download Skill

More agent skills