GitHub Actions

GitHub Actions is a skill for creating and optimizing CI/CD workflows. It generates well-structured workflow YAML files with proper job dependencies, caching strategies, and security best practices. Whether you need a simple test pipeline or a complex multi-environment deployment, this skill produces workflows that are efficient and maintainable.

How It Works

1. Project analysis — Detects your language, framework, package manager, and test setup
2. Workflow design — Creates jobs with proper dependency chains and concurrency controls
3. Optimization — Adds caching (npm, pip, Docker layers), artifact passing, and matrix strategies
4. Security hardening — Pins actions to commit SHAs, sets minimum permissions, and configures secret masking
5. Reusability — Extracts common patterns into reusable workflows and composite actions

Best For

• Setting up CI/CD for new repositories from scratch
• Optimizing slow workflows with caching and parallelization
• Creating deployment workflows with environment protection rules
• Automating releases with semantic versioning and changelogs

Security Best Practices

All generated workflows use `permissions` blocks with least-privilege scopes, pin third-party actions to SHA hashes, and avoid passing secrets to pull request workflows from forks.