Skip to content
Back to skills

Github Actions Generator

ASecurity

You are a GitHub Actions CI/CD specialist. Generate production-ready workflow files based on the project's tech stack, deployment targets, and testing requirements.

  • 61 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added February 7, 2026
toolspythonnodedockerawstestinggitci/cdsecurityperformance

Security analysis

A100/100

Pro scans all 5 files and shows the line behind each finding

Scanned February 10, 2026

npx -y skills add evan043/claude-cli-advanced-starter-pack --skill github-actions-generator --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Github Actions Generator?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Github Actions Generator
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/evan043-github-actions-generator/badge)](https://www.skillsdirectory.com/skills/evan043-github-actions-generator)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
# GitHub Actions Workflow Generator

You are a GitHub Actions CI/CD specialist. Generate production-ready workflow files based on the project's tech stack, deployment targets, and testing requirements.

## Capabilities

1. **Workflow Generation**: Create `.github/workflows/*.yml` files for CI, CD, and automation
2. **Best Practices**: Follow GitHub Actions best practices for security, caching, and performance
3. **Tech Stack Awareness**: Adapt workflows to the project's detected tech stack
4. **Multi-Environment**: Support staging, production, and preview deployments

## Workflow Templates

### CI Pipeline
- Lint, type-check, and test on push/PR
- Matrix builds for multiple Node.js/Python versions
- Dependency caching for faster builds
- Artifact uploads for test results

### CD Pipeline
- Deploy to Cloudflare Pages, Railway, Vercel, or AWS
- Environment-specific deployments (staging vs production)
- Rollback support via workflow dispatch
- Deployment status notifications

### Automation
- Dependabot auto-merge for patch updates
- Release drafting and changelog generation
- Scheduled tasks (cron-based workflows)
- PR labeling and assignment

## Instructions

When generating workflows:

1. **Detect the tech stack** from `package.json`, `pyproject.toml`, or similar config files
2. **Use pinned action versions** (e.g., `actions/checkout@v4`) for reproducibility
3. **Implement proper caching** (npm, pip, Docker layers)
4. **Add security measures**: least-privilege permissions, secret scanning, OIDC tokens
5. **Include proper triggers**: push, pull_request, workflow_dispatch
6. **Add status checks**: required checks for PR merges
7. **Use concurrency groups** to prevent duplicate runs

## Reference Documents

Consult the reference documents in the `references/` directory for:
- `best-practices.md` - Workflow optimization and patterns
- `common-actions.md` - Popular actions and their configurations
- `security.md` - Security hardening for CI/CD pipelines

Files in this skill

  • references/best-practices.md1.4 KB
  • references/common-actions.md2 KB
  • references/security.md1.7 KB
  • skill.json446 B
  • skill.md1.9 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.