Skip to content
cccskills
FreePublished on GitHub

setup-ci

Generate a GitHub Actions workflow for SDLC validation. Use when setting up CI/CD for a new project.

The English summary is being prepared. Showing the original description.

Works withGitHub
See how to install

Files included (4)

  • SKILL.md1.9 KB
  • templates/go.yml802 B
  • templates/javascript.yml731 B
  • templates/python.yml1.1 KB

SKILL.md (original)

Review the instructions the agent will receive before you install.

Setup CI/CD

Generate a GitHub Actions workflow that mirrors the SDLC validation pipeline.

Arguments

  • python — Python project (ruff, mypy, pytest, bandit). Default if .py files detected.
  • javascript — JS/TS project (eslint, tsc, jest/vitest).
  • go — Go project (go vet, staticcheck, go test).

If no argument provided, detect language from project files.

Steps

  1. Detect language if not specified:

    • *.py files → python
    • *.ts or *.js files → javascript
    • *.go files → go
  2. Check for existing workflow:

    • If .github/workflows/sdlc-validate.yml exists, warn and ask before overwriting.
  3. Create workflow directory:

mkdir -p .github/workflows
  1. Generate workflow from the appropriate template:

  2. Report the created file and suggest next steps:

    Created .github/workflows/sdlc-validate.yml
    
    Python workflow runs on push and PR to main:
    - Lint (ruff)
    - Format check (ruff format)
    - Type check (mypy)
    - Tests (pytest)
    - Security (bandit)
    
    JavaScript/TypeScript workflow runs:
    - Install (npm ci)
    - Lint (npm run lint)
    - Type check (tsc --noEmit if tsconfig.json present)
    - Tests (npm test)
    - Security audit (npm audit --audit-level=high)
    
    Go workflow runs:
    - Modules (go mod download)
    - Vet (go vet ./...)
    - Lint (staticcheck ./...)
    - Tests with race detector (go test -race ./...)
    - Security scan (gosec ./...)
    
    Commit and push to activate CI.
    

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

Comments are published right away. Do not include personal information such as email addresses or phone numbers. Up to 2 URLs.

0 / 1,000 characters

This form is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

More skills from this repository

Generate a GitHub Actions workflow for Android — JDK + Gradle caching, build, unit + instrumented tests, Android Lint, run the Android pre-flight checks, and (optionally) sign + upload a signed app bundle to a Play track. Use when setting up CI for an Android app.

The English summary is being prepared. Showing the original description.

SteveGJones/ai-first-sdlc-practices41Updated Oct 5, 2026

Validated Google Play release — runs the pre-flight checks and clears the Play policy gates, builds a signed app bundle with a git-stamped versionCode, uploads to a track, and walks staged rollout (with halt/roll-forward). Use when releasing an Android app to Play.

The English summary is being prepared. Showing the original description.

SteveGJones/ai-first-sdlc-practices41Updated Oct 5, 2026

Scaffold a new Android app with SDLC and Play-safe defaults — Kotlin/Compose Gradle project with version catalog, convention plugins, module layout, a targetSdk that meets the Play mandate, R8 on release, and git-ignored signing so it passes the pre-flight checker from day one. Use when starting a new Android project.

The English summary is being prepared. Showing the original description.

SteveGJones/ai-first-sdlc-practices41Updated Oct 5, 2026

Set up Android app signing safely — generate an upload keystore, enroll in Play App Signing, and wire a Gradle release signingConfig that reads secrets from a git-ignored keystore.properties / CI (never committed). Use when configuring signing for a Play release.

The English summary is being prepared. Showing the original description.

SteveGJones/ai-first-sdlc-practices41Updated Oct 5, 2026

Pick an existing workflow for a task or author a new one — recommends workflow + team formation, or generates a fresh workflow YAML with command prompts and team validation.

The English summary is being prepared. Showing the original description.

SteveGJones/ai-first-sdlc-practices41Updated Oct 5, 2026

Guide the team through writing a change-impact record for IEC 62304 / FDA / ISO 26262 ASIL C+ projects. Surfaces the affected REQ/DES/TEST/CODE artefacts and captures human-attested verification approach.

The English summary is being prepared. Showing the original description.

SteveGJones/ai-first-sdlc-practices41Updated Oct 5, 2026

See all skills by SteveGJones

Report a problem with this skill