abhisheksharma-17/github-actions
skills/github-actions/SKILL.md
GitHub Actions CI/CD platform for workflow automation, testing, building, and deploying code. MANDATORY TRIGGERS: GitHub Actions, github actions, github workflow, CI/CD pipeline, workflow YAML, .github/workflows, actions runner, reusable workflow, composite action, workflow_dispatch, matrix strategy. Also trigger when building CI/CD pipelines, automating tests on push/PR, deploying from GitHub, configuring caching or artifacts in workflows, setting up OIDC cloud auth, or hardening workflow security. When in doubt about whether to use this skill for GitHub CI/CD tasks, use it.
$ install --global
skillsauthnpx skillsauth add abhisheksharma-17/skills-graph github-actionsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 18, 2026, 4:40 AM160.5s18 files scanned
SKILL.md
- name:
- github-actions
- description:
- GitHub Actions CI/CD platform for workflow automation, testing, building, and deploying code. MANDATORY TRIGGERS: GitHub Actions, github actions, github workflow, CI/CD pipeline, workflow YAML, .github/workflows, actions runner, reusable workflow, composite action, workflow_dispatch, matrix strategy. Also trigger when building CI/CD pipelines, automating tests on push/PR, deploying from GitHub, configuring caching or artifacts in workflows, setting up OIDC cloud auth, or hardening workflow security. When in doubt about whether to use this skill for GitHub CI/CD tasks, use it.
- license:
- MIT
- version:
- 1.0.0
- author:
- Abhishek Sharma
- tags:
- ["ci-cd", "github", "automation", "devops", "workflows", "deployment", "testing"]
GitHub Actions
CI/CD & workflow automation platform — 2026 | Docs | Marketplace | Changelog
Reference Files
| File | Read When |
|:-----|:----------|
| references/00-overview.md | Starting with GitHub Actions, core concepts, terminology, quick start |
| references/01-workflow-syntax.md | Writing workflow YAML, name, on, jobs, steps, defaults, permissions |
| references/02-event-triggers.md | Configuring push, pull_request, schedule, workflow_dispatch, repository_dispatch triggers |
| references/03-jobs-runners.md | Job configuration, runner types (hosted/self-hosted), containers, services, job dependencies |
| references/04-steps-actions.md | Step configuration, uses vs run, action types (composite/JavaScript/Docker), marketplace |
| references/05-expressions-contexts.md | Expression syntax, contexts (github, env, steps, secrets), functions, conditionals |
| references/06-matrix-strategy.md | Matrix builds, include/exclude, max-parallel, fail-fast, dynamic matrix generation |
| references/07-caching-artifacts.md | Dependency caching, artifact upload/download, retention, cross-job data sharing |
| references/08-secrets-variables.md | Secrets management, variables, GITHUB_TOKEN, environment-scoped secrets, permissions |
| references/09-reusable-workflows.md | Reusable workflows (workflow_call), inputs/outputs, secrets inheritance, composite actions |
| references/10-environments-deployments.md | Environments, protection rules, approvals, wait timers, deployment strategies |
| references/11-security-hardening.md | OIDC cloud auth, SHA pinning, least-privilege tokens, supply chain security, dependencies |
| references/12-advanced-patterns.md | Concurrency groups, path filtering, monorepo CI, conditional jobs, self-hosted autoscaling |
Quick Start
Create .github/workflows/ci.yml in your repository:
name: CI
on: [push, pull_request]
jobs:
test:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- run: npm ci
- run: npm test
Quick Reference
- Workflow syntax — Full YAML reference
- Events — All trigger events
- Contexts — Expression contexts
- Marketplace — Community actions
Related Skills
abhisheksharma-17/weaviate
tools
VerifiedTrustedCommunity
Open-source AI-native vector database for semantic search, hybrid search, RAG, and agent-driven workflows with multi-tenancy and model provider integrations. MANDATORY TRIGGERS: weaviate, Weaviate, weaviate-client, near_text, near_vector, hybrid search vector database, WeaviateClient, weaviate.connect, collections.create, query.near_text, query.hybrid, query.bm25. Also trigger when user wants to build semantic search, store vector embeddings, implement RAG pipelines, combine keyword and vector search, set up multi-tenant vector storage, use named vectors, or integrate vector DB with LLM providers. When in doubt about whether to use this skill for vector database or semantic search tasks, use it.
1SKILL.mdUpdated Jun 4, 2026
abhisheksharma-17/playwright
tools
VerifiedTrustedCommunity
End-to-end testing and browser automation framework by Microsoft — locators, assertions, fixtures, network mocking, visual testing, tracing, codegen, API testing, and CI/CD integration. MANDATORY TRIGGERS: playwright, Playwright, @playwright/test, page.goto, page.click, page.locator, getByRole, getByText, getByTestId, expect(page), toHaveScreenshot, playwright.config, npx playwright. Also trigger when user wants to write E2E tests, automate browser interactions, test across Chromium/Firefox/WebKit, mock network requests in tests, do visual regression testing, generate tests with codegen, or set up CI test pipelines. When in doubt about whether to use this skill for browser testing or E2E automation tasks, use it.
1SKILL.mdUpdated Jun 4, 2026
abhisheksharma-17/openai-agents-sdk
tools
VerifiedTrustedCommunity
OpenAI Agents SDK for building multi-agent workflows with tools, handoffs, guardrails, streaming, MCP, sessions, and tracing. MANDATORY TRIGGERS: openai-agents, openai agents sdk, openai-agents-python, openai agents, Runner.run, function_tool, handoff, guardrail, MCPServerStdio, MCPServerStreamableHttp, HostedMCPTool, RunContextWrapper, AgentHooks. Also trigger when user wants to build multi-agent systems with OpenAI models, create agent orchestration with handoffs, add guardrails to LLM applications, integrate MCP servers with agents, implement streaming agent responses, or use OpenAI's official agent framework. When in doubt about whether to use this skill for OpenAI agent tasks, use it.
1SKILL.mdUpdated Jun 4, 2026
abhisheksharma-17/haystack
tools
VerifiedTrustedCommunity
AI orchestration framework for building production-ready RAG applications, autonomous agents, and multimodal search systems. MANDATORY TRIGGERS: haystack, deepset, haystack-ai, haystack pipeline, haystack agent. Also trigger when the user wants to build RAG pipelines with modular components, create tool-calling agents with Haystack, orchestrate retrieval-augmented generation, build semantic search systems, or evaluate LLM pipelines. When in doubt about whether to use this skill for RAG orchestration or AI pipeline tasks, use it.
1SKILL.mdUpdated Jun 4, 2026