scaixeta/github-actions-templates
.agents/skills/github-actions-templates/SKILL.md
Padrões de CI/CD com GitHub Actions para build, teste e validação segura em projetos MCP.
$ install --global
skillsauthnpx skillsauth add scaixeta/CindyAgent github-actions-templatesInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 25, 2026, 9:34 PM1.8s1 file scanned
SKILL.md
- name:
- github-actions-templates
- description:
- Padrões de CI/CD com GitHub Actions para build, teste e validação segura em projetos MCP.
GitHub Actions Templates
Quando usar
Usar para criar ou revisar pipelines CI/CD no GitHub com foco em qualidade e previsibilidade.
Procedimento
- Mapear jobs mínimos: lint, test, build.
- Definir gates por branch/PR.
- Configurar cache e artefatos essenciais.
- Validar falhas comuns e mensagens de diagnóstico.
Restrições DOC2.5
- Não acoplar segredos fora dos padrões do repositório.
- Não liberar deploy automático sem aprovação explícita.
- Commits somente por comando do PO.
Dependências
- Repositório GitHub configurado
- Secrets definidos no projeto
Related Skills
scaixeta/gsd-forensics
data-ai
VerifiedTrustedCommunity
Post-mortem investigation for failed GSD workflows — analyzes git history, artifacts, and state to diagnose what went wrong
1SKILL.mdUpdated Apr 16, 2026
scaixeta/gsd-fast
data-ai
VerifiedTrustedCommunity
Execute a trivial task inline — no subagents, no planning overhead
1SKILL.mdUpdated Apr 16, 2026
scaixeta/gsd-execute-phase
tools
VerifiedTrustedCommunity
Execute all plans in a phase with wave-based parallelization
1SKILL.mdUpdated Apr 16, 2026
scaixeta/gsd-do
tools
VerifiedTrustedCommunity
Route freeform text to the right GSD command automatically
1SKILL.mdUpdated Apr 16, 2026