nazozokc/github-actions
agents/skills/github-actions/SKILL.md
When creating, editing, or debugging GitHub Actions workflow YAML files
$ install --global
skillsauthnpx skillsauth add nazozokc/dotfiles github-actionsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 9, 2026, 2:18 AM14.3s1 file scanned
SKILL.md
- name:
- github-actions
- description:
- When creating, editing, or debugging GitHub Actions workflow YAML files
GitHub Actions Guidelines
When to Use
- When creating or editing
.github/workflows/*.yml - When debugging CI failures
Basic Rules
- Always run actionlint: Validate with
actionlintafter creating or editing a workflow - Use exact runner names: Use official names like
ubuntu-latest/ubuntu-24.04 - ShellCheck compliance: Watch for SC2148 and SC2155 in
run:blocks - Respect exit codes: Don't suppress with
|| true— fix the root cause
Runner Name Cheatsheet
| Use Case | Runner Name |
| ------------ | --------------- |
| Latest Linux | ubuntu-latest |
| Pinned Linux | ubuntu-24.04 |
| macOS | macos-latest |
Common Mistakes and Fixes
| Mistake | Fix |
| ------------------------------------- | ------------------------------------------------------------------ |
| Wrong runs-on runner name | Check the cheatsheet above |
| SC2155: declare and assign separately | Split into local var; var=$(cmd) |
| SC2148: missing shebang | Not needed for inline scripts; add #!/usr/bin/env bash for files |
| luacheck exits non-zero | Check --no-unused-args option or .luacheckrc |
flake.lock Auto-update PR
- Uses
nazozokc-updater-bot - Branch name:
update/flake-lock-YYYYMMDD - Auto-merge: Managed separately from Renovate
Notes
- Only use
${{ secrets.NAME }}format for secrets - Verify
github.event_namecarefully inif:conditions - Matrix builds increase diff size — confirm before changing
Related Skills
nazozokc/websearch
development
VerifiedTrustedCommunity
Method and notes when performing web searches
2SKILL.mdUpdated Apr 9, 2026
nazozokc/typescript
development
VerifiedTrustedCommunity
Guidelines when working on TypeScript/JS projects
2SKILL.mdUpdated Apr 9, 2026
nazozokc/skills-creator
tools
VerifiedTrustedCommunity
Template and notes when creating or updating SKILL.md files under skills/
2SKILL.mdUpdated Apr 9, 2026
nazozokc/shell
tools
VerifiedTrustedCommunity
When writing fish shell scripts, functions, abbreviations, or editing shell configuration
2SKILL.mdUpdated Apr 9, 2026