Results for “github-actions”

Use when hunting CI/CD bot comment command vulnerabilities where issue_comment or pull_request_review_comment triggers invoke privileged workflows without verifying the commenter's identity or authorization. Trigger on: "bot command injection", "issue_comment trigger", "@github-actions", "slash command CI", "CI bot command", "comment triggered workflow", "unauthenticated bot", "github-actions publish", "comment dispatch", no authorization check on workflow_dispatch from comment, chatops CI/CD, supply chain via PR comment.

The English summary is being prepared. Showing the original description.

GitHub Actions workflow patterns for React Native iOS simulator and Android emulator cloud builds with downloadable artifacts. Use when setting up CI build pipelines or downloading GitHub Actions artifacts via gh CLI and GitHub API.

The English summary is being prepared. Showing the original description.

Use when designing matrix builds (OS x version x dimension), composing reusable workflows, gating jobs on conditions, doing OIDC to AWS/GCP/Cloudflare without long-lived secrets, sharding tests across runners, or fixing cache invalidation. Triggers: workflow_call between repos, fail-fast: false tradeoffs, exclude/include matrix surgery, environment protection rules, OIDC trust policy setup, concurrency cancellation on duplicate pushes, artifact reuse across jobs, conditional job matrices computed at runtime. NOT for GitLab CI / CircleCI / Jenkins (different yaml dialects), self-hosted runner administration, or local act dev.

The English summary is being prepared. Showing the original description.

Build production CI/CD pipelines with GitHub Actions. Implements matrix builds, caching, deployments, testing, security scanning. Use for automated testing, deployments, release workflows. Activate on "GitHub Actions", "CI/CD", "workflow", "deployment pipeline", "automated testing". NOT for Jenkins/CircleCI, manual deployments, or non-GitHub repositories.

The English summary is being prepared. Showing the original description.

Interprets GitHub Actions run status and logs, diagnoses CI failure patterns, and suggests targeted fixes. Handles dependency install failures, test timeouts, build OOM, flaky tests, and workflow misconfigurations. Activate on: 'CI failing', 'build broken', 'workflow error', 'GitHub Actions debug', 'flaky CI', 'pipeline timeout', 'CI red'. NOT for: writing new workflows from scratch (use github-actions-pipeline-builder), CI caching strategy (use ci-cache-optimizer), deployment orchestration (use devops-automator).

The English summary is being prepared. Showing the original description.

GitHub Actions CI/CD for GNOME apps — build+test with GTK4/libadwaita on runners, Flatpak builds via flatpak-github-actions, attaching .flatpak bundles to releases, optional OCI publishing to GHCR, and headless GUI smoke tests with Xvfb/AT-SPI. Use when setting up CI, release automation, or GUI testing for a GTK app.

The English summary is being prepared. Showing the original description.

Interprets GitHub Actions run status and logs, diagnoses CI failure patterns, and suggests targeted fixes. Handles dependency install failures, test timeouts, build OOM, flaky tests, and workflow misconfigurations. Activate on: 'CI failing', 'build broken', 'workflow error', 'GitHub Actions debug', 'flaky CI', 'pipeline timeout', 'CI red'. NOT for: writing new workflows from scratch (use github-actions-pipeline-builder), CI caching strategy (use ci-cache-optimizer), deployment orchestration (use devops-automator).

The English summary is being prepared. Showing the original description.

Create and improve GitHub Actions workflows for automated testing and deployment. Coordinate multiple AI agents to review pull requests, investigate failed runs, scan for security issues, and manage releases across repositories.

• Create workflows for automated testing and deployment
• Investigate failed runs and suggest fixes
• Coordinate code reviews and security checks

Create a starter structure for a custom AI agent harness, the setup that supports agent execution. Choose a template and host, preview the plan, then explicitly confirm generation in a new directory outside the current project.

• Creating a coding agent harness from a template
• Preparing starter setups for different agent hosts
• Previewing generated files' destination before writing

Create GitHub Actions workflows to automate testing, builds, and deployments. Includes patterns for Docker image publishing, Kubernetes deployment, security scans, and testing across multiple environments, plus reusable workflows and approval steps for production releases.

• Automating tests for pushes and pull requests
• Building and publishing Docker images
• Deploying to Kubernetes with production approvals

Update GitHub Actions when workflow logs warn about deprecated runtimes. The skill guides compatible version selection, pins actions to exact commits, preserves existing workflow behavior, and checks execution results and outputs after the upgrade.

• Addressing deprecated runtime warnings
• Upgrading actions while preserving workflow behavior
• Pinning action versions to exact commits

Review GitHub Actions workflows for unsafe input handling, excessive token permissions, exposed secrets, and changeable action references. Get findings grouped by issue type, with severity ratings, exact YAML locations, and concrete fixes to review.

• Reviewing CI workflows for security issues
• Checking privileged triggers that run fork code
• Restricting GITHUB_TOKEN permissions

Audit GitHub Actions workflows and run history to identify wasted automated checks and runner time. Get up to three evidence-based improvements aimed at reducing runtime or cost while preserving required validation.

• Investigate long GitHub Actions runs
• Review CI costs and unnecessary workflow runs
• Improve caching and cancellation of overlapping runs

Audit GitHub Actions workflows and CI/CD configurations for supply chain risks. Use Python and YAML parsing to identify unpinned actions, unsafe event expressions, excessive permissions, dependency confusion, and potential exposure of secrets in build pipelines.

• Reviewing GitHub Actions workflow security
• Checking action version pinning
• Finding unsafe event expressions in scripts

Monitor GitHub Actions builds and tests with the gh command-line tool. Track runs until completion, inspect branch or pull request checks, read failed job logs, and rerun failed jobs or entire workflows.

• Watch a build or test run until completion
• Check workflow status for a branch or PR
• Read logs from failed jobs

Advanced GitHub Actions workflow automation with AI swarm coordination, intelligent CI/CD pipelines, and comprehensive repository management

The English summary is being prepared. Showing the original description.

Cut GitHub Actions minutes and wall-clock time without losing coverage — the OS billing multiplier (macOS 10x / Windows 2x / Linux 1x), trigger hygiene that stops push+pull_request double-firing, concurrency that cancels superseded runs, dependency caching keyed on lockfiles, matrix discipline, and auditing scheduled crons that bill 24/7. Use when CI is burning included minutes, when runs feel slow, when setting up a new repo's workflows, or when reviewing an existing workflow for waste.

The English summary is being prepared. Showing the original description.

Create production-ready GitHub Actions workflows for automated testing, building, and deploying applications. Use when setting up CI/CD with GitHub Actions, automating development workflows, or creating reusable workflow templates.

The English summary is being prepared. Showing the original description.

GitHub Actions workflow patterns for React Native iOS simulator and Android emulator cloud builds with downloadable artifacts. Use when setting up CI build pipelines or downloading GitHub Actions artifacts via gh CLI and GitHub API.

The English summary is being prepared. Showing the original description.

Build, test, and deploy applications using GitHub Actions workflows. Create CI/CD pipelines, configure runners, manage secrets, and automate software delivery. Use when working with GitHub repositories, automating builds, running tests, or deploying applications.

The English summary is being prepared. Showing the original description.

Generate and optimize GitHub Actions CI/CD workflows. Use when designing workflows, planning multi-environment deployments, optimizing pipeline cost and runtime, or implementing blue- green, canary, or rolling deployment strategies.

The English summary is being prepared. Showing the original description.

分析真实项目并生成或修订安全、可验证的 GitHub Actions workflow；当用户要求创建 CI、测试矩阵、构建、Release、部署、缓存、Secrets、OIDC、PR 自动化或排查 workflow 配置时使用

The English summary is being prepared. Showing the original description.

Advanced GitHub Actions workflow automation with AI swarm coordination, intelligent CI/CD pipelines, and comprehensive repository management

The English summary is being prepared. Showing the original description.

Claude Code Action entegrasyonu - PR review ve issue-to-fix workflow kurulumu

The English summary is being prepared. Showing the original description.