plugins/patterns/skills/workflowtemplate-patterns/SKILL.md
WorkflowTemplate foundations: versioned, reusable automation building blocks with parameter contracts, error handling, volumes, and RBAC for production workflows.
npx skillsauth add adaptive-enforcement-lab/claude-skills workflowtemplate-patternsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
WorkflowTemplates are the foundation of reusable automation in Argo Workflows. Rather than defining workflows inline or copying YAML between projects, WorkflowTemplates let you create versioned, tested building blocks that can be invoked by events, schedules, or other workflows.
Start Simple
Begin with basic structure and retry strategy. Add init containers and custom volumes only when the simpler approach proves insufficient.
The naive approach to workflow automation is embedding all logic directly in the triggering resource: a Sensor, CronWorkflow, or manual submission. This works for simple cases but quickly becomes unmaintainable.
Consider a documentation build pipeline. The first version might be a simple script triggered by a GitHub push. But then you need the same build for scheduled refreshes. And manual triggers for debugging. And a "full rebuild" variant that processes all repositories instead of just the changed one.
Without WorkflowTemplates, you end up with four copies of nearly identical YAML. When you fix a bug or add a feature, you update one copy and forget the others. Drift accumulates. Debugging becomes archaeology.
WorkflowTemplates solve this by extracting the workflow logic into a standalone resource. Triggers reference the template by name. Updates happen in one place. The template becomes a contract: "give me these parameters, and I'll do this work."
| Pattern | Description | | --------- | ------------- | | Basic Structure | Fundamental WorkflowTemplate anatomy and parameter handling | | Retry Strategy | Error handling with exponential backoff | | Init Containers | Multi-stage pipelines with sequential setup | | Volume Patterns | Persistent storage, secrets, and configuration | | RBAC Configuration | Security and permission management |
Start Simple
Begin with basic structure and retry strategy. Add init containers and custom volumes only when the simpler approach proves insufficient.
| Pattern | Description | | --------- | ------------- | | Basic Structure | Fundamental WorkflowTemplate anatomy and parameter handling | | Retry Strategy | Error handling with exponential backoff | | Init Containers | Multi-stage pipelines with sequential setup | | Volume Patterns | Persistent storage, secrets, and configuration | | RBAC Configuration | Security and permission management |
documentation
Workload Identity Federation implementation guide. GKE setup, IAM bindings, ServiceAccount configuration, migration from service account keys, and troubleshooting patterns.
development
Secure GitHub Actions trigger patterns for pull requests, forks, and reusable workflows. Preventing privilege escalation and code injection through trigger misconfiguration.
development
Structured framework for evaluating GitHub Actions security before adoption. Trust tiers, risk assessment checklist, and decision tree for action evaluation.
testing
Securely store GitHub App credentials across different environments. GitHub Actions secrets, external CI, Kubernetes, and automated rotation patterns.