dhruvanbhalara/github-actions
skills/github/github-actions/SKILL.md
Orchestrate CI/CD pipelines with GitHub Actions for Flutter apps. Use when setting up quality gates, automated builds, semantic versioning, code signing, or deployment workflows.
$ install --global
skillsauthnpx skillsauth add dhruvanbhalara/skills github-actionsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 11, 2026, 2:02 AM20.6s1 file scanned
SKILL.md
- name:
- github-actions
- description:
- Orchestrate CI/CD pipelines with GitHub Actions for Flutter apps. Use when setting up quality gates, automated builds, semantic versioning, code signing, or deployment workflows.
- platforms:
- cross-platform
- languages:
- generic
- category:
- automation
GitHub Actions Pipeline
- Use GitHub Actions as the primary CI/CD platform
- Trigger on
pushtomainand on all Pull Requests - Pipeline MUST include these stages in order:
Stage 1: Quality Gate
- name: Analyze
run: flutter analyze --fatal-infos --fatal-warnings
- name: Format Check
run: dart format --set-exit-if-changed .
- name: Run Tests
run: flutter test --coverage
- Zero warnings policy —
--fatal-infosensures no info-level issues pass - Format check MUST use
--set-exit-if-changedto enforce consistent formatting
Stage 2: Build
- name: Build APK
run: flutter build apk --flavor prod --dart-define-from-file=config/prod.json --release
- name: Build IPA
run: flutter build ipa --flavor prod --dart-define-from-file=config/prod.json --release --export-options-plist=ios/ExportOptions.plist
- Always build with
--flavor prodand--dart-define-from-file=config/prod.json - Use a single
main.dart— do NOT pass-t lib/main_prod.dart
Stage 3: Deploy (on main merge only)
- Upload to Firebase App Distribution for internal testing
- Upload to Google Play Internal Track / TestFlight for staging
- Production release requires manual approval gate
Versioning Strategy
- Follow Semantic Versioning:
MAJOR.MINOR.PATCH+BUILD - Bump
PATCHfor bug fixes,MINORfor features,MAJORfor breaking changes - Set version in
pubspec.yaml:version: 1.2.3+45 - The
+BUILDnumber MUST auto-increment in CI (use build number from CI environment)
Code Signing
- Store signing keys and certificates in GitHub Secrets (never in repo)
- Android: Store keystore as base64-encoded secret, decode in CI
- iOS: Use App Store Connect API key for automated signing
- NEVER commit
*.jks,*.keystore,*.p12, or*.mobileprovisionfiles
PR Requirements
- All PRs MUST pass: analysis (0 warnings), formatting, and tests before merge
- Require at least 1 code review approval
- Branch protection on
main: no direct pushes, require status checks
Release Checklist
- [ ] Version bumped in
pubspec.yaml - [ ] CHANGELOG.md updated
- [ ] All tests passing on CI
- [ ] Build succeeds for both Android and iOS
- [ ] Tested on physical device with production flavor
- [ ] Git tag created matching version (
v1.2.3)
Related Skills
dhruvanbhalara/flutter-use-http-package
development
VerifiedTrustedCommunity
Perform REST API networking operations (GET, POST, PUT, DELETE) using the lightweight and robust standard `http` package, including platform configurations and background parsing models.
20SKILL.mdUpdated May 28, 2026
dhruvanbhalara/flutter-setup-localization
development
VerifiedTrustedCommunity
Configure internationalization and localization support using Flutter's built-in l10n system, App Resource Bundle (ARB) files, and ICU formatting syntax.
20SKILL.mdUpdated May 28, 2026
dhruvanbhalara/flutter-implement-json-serialization
development
VerifiedTrustedCommunity
Create model classes with fromJson/toJson using dart:convert and Dart 3 pattern matching. Use when manually mapping JSON to classes, parsing HTTP responses, or choosing between manual and code-generated serialization.
20SKILL.mdUpdated May 28, 2026
dhruvanbhalara/flutter-fix-layout-issues
data-ai
VerifiedTrustedCommunity
Diagnose and fix Flutter layout constraint violations (RenderFlex overflow, unbounded height/width, ParentData misuse). Use when encountering layout exceptions, yellow-black overflow stripes, or red error screens.
20SKILL.mdUpdated May 28, 2026