CI/CD con GitHub Actions: pipeline stages, caching, environments, branch protection, deploy strategies.
The English summary is being prepared. Showing the original description.
Run score Not tested
See how to installReview the instructions the agent will receive before you install.
→ Read references/checklist.md for full 12-item pipeline setup checklist
GitHub Actions. Principle: fail fast, cache aggressively, gate production.
| Stage | Purpose | Notes |
|---|---|---|
| 1. Lint | Style + static analysis | Cheapest — run first |
| 2. Type-check | tsc --noEmit or equiv | Catches errors before tests |
| 3. Test | Unit + integration | Service containers for DB |
| 4. Build | Compile/bundle artifact | After tests pass |
| 5. E2E | Playwright (separate job) | Needs build artifact |
| 6. Deploy | Push image / deploy | Only on main/tags |
Parallelize lint + type-check + test; build waits for all.
| Decision | Guidance |
|---|---|
| Matrix | Only for libraries (multi-version); apps pin one version |
| Caching | Always — setup-node/setup-go built-in; actions/cache for custom |
| Artifacts | Upload dist/ (7d retention); download in deploy job |
| Concurrency | Group per workflow+ref; cancel-in-progress: true on PRs |
| Pinning | Third-party actions by full commit SHA with the version in a comment; a bot keeps them current |
| Reusable | Shared logic → org/shared-workflows repo |
| Monorepo | Path filters; run only affected packages |
| Rule | Why |
|---|---|
permissions: contents: read at the top, widened per job | The token defaults to more than most jobs need |
No contributed code in pull_request_target / workflow_run | They run with secrets and a write token, even for forks |
Untrusted ${{ github.event.* }} only through env: | Expressions expand before the shell: a PR title can run commands |
OIDC (id-token: write) instead of stored cloud keys | Short-lived credentials scoped to repo + branch |
npm ci / --frozen-lockfile in every install step | See /supply-chain-security |
→ Read references/actions-hardening.md for examples of each rule, the repo settings to change,
persist-credentials, and workflow linters (actionlint,zizmor)
| Env | Trigger | Gate |
|---|---|---|
| staging | Push to main | Auto-deploy, no review |
| production | Tag v* or manual dispatch | Required reviewers (1-2) |
Promotion: CI green + staging smoke test + changelog reviewed. Use GitHub Environments for secret isolation.
→ Read references/secret-and-deploy.md for branch protection checklist, secret location table, and deploy strategies (rolling/blue-green/canary/OTA)
→ Read references/anti-patterns.md for 8 common CI/CD anti-patterns
permissions: read-only by default; no pull_request_target running PR code; untrusted inputs via env:No reviews yet. Tell others what you thought.
No login needed. Share how it worked for you, ask a question, or note where it did not run.
No comments yet. Be the first to write one.
Plan, design, and implement A/B tests and experiments with statistical rigor. Covers hypothesis frameworks, sample sizing, metrics, and result analysis.
The English summary is being prepared. Showing the original description.
Web/mobile accessibility decision guide: WCAG 2.2 AA, ARIA, keyboard nav, focus management, contrast, testing. Use for: a11y, accessibility, wcag, aria, screen reader, keyboard, contrast.
The English summary is being prepared. Showing the original description.
Generate, iterate, and scale ad creative for paid advertising across Google, Meta, LinkedIn, and X. Covers platform specs, creative frameworks, and quality validation.
The English summary is being prepared. Showing the original description.
Musica interactiva para juegos: layering vertical, re-secuenciacion horizontal, stingers, reglas de transicion con sync points, y mapeo de estados de gameplay a musica. Usar para: musica adaptativa, sistema de musica dinamica, transiciones musicales, combat music.
The English summary is being prepared. Showing the original description.
Design multi-agent systems, create agent architectures, define communication patterns, and build autonomous agent workflows with structured evaluation frameworks.
The English summary is being prepared. Showing the original description.
Inter-agent communication protocol for C-suite agent teams. Defines invocation syntax, loop prevention, isolation rules, response formats, and quality loops.
The English summary is being prepared. Showing the original description.