Results for “actions”

Guides setting up CI/CD pipelines with GitHub Actions, testing, and deployment strategies.

Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations, detecting attack vectors where attacker-controlled input reaches AI agents in CI/CD pipelines.

Run GitHub Actions workflows locally with act, including installation, configuration, event payloads, secrets, and debugging.

Scans GitHub Actions workflows and CI/CD pipeline configurations for supply chain attack vectors including unpinned actions, script injection via expressions, dependency confusion, and secrets exposure.

Implement Terraform Provider actions using the Plugin Framework. Use when developing imperative operations that execute at lifecycle events (before/after create, update, destroy).

Audit CI/CD pipelines (GitHub Actions) for cost, speed, and safety. Use when the Actions bill is high, Actions minutes, runner cost, slow CI, artifact/cache storage, or "CI/CD / workflow audit". Gate logic (bypass, ratchet gaming, required-but-not) → audit-gate-logic.

Interact with GitHub issues, pull requests, Actions runs, and the REST API using the gh CLI.

Test GitHub Actions workflows locally using act, covering installation, configuration, and usage patterns for debugging and iterative development.

Automates GitHub Actions, Issues, and PR management for CI/CD, project tracking, and code review workflows.

Configure and run CodeQL code scanning through GitHub Actions workflows or the standalone CLI for security analysis.

Interact with GitHub issues, pull requests, Actions runs, and the GitHub API using the `gh` CLI.

Audits GitHub Actions workflows for exploitable vulnerabilities with concrete attack scenarios.

Automates CI/CD pipeline setup, quality gates, test runners, and deployment strategies for GitHub Actions.

Debug and fix failing GitHub Actions PR checks by inspecting logs, summarizing failures, and implementing fixes after approval.

Integrates Static Application Security Testing (SAST) tools—CodeQL and Semgrep—into GitHub Actions CI/CD pipelines, configuring automated code scanning, tuning rules, uploading SARIF results, and establishing quality gates that block merges on high-severity vulnerabilities.

Analyze GitHub Actions failures and identify root causes

Set up NuGet trusted publishing (OIDC) on a GitHub Actions repo, replacing long-lived API keys with short-lived tokens.

Developing custom GitHub Actions (JavaScript, TypeScript, Docker, Composite). Use this skill when the user asks to 'create a GitHub Action', 'build a custom action', 'publish action to marketplace', 'write action.yml', or 'develop reusable action'.

CI/CD pipeline setup — GitHub Actions, testing, linting, deployment. Use when setting up CI from scratch, adding GitHub Actions, automating tests, wiring up deployment, or improving an existing build pipeline.

Diseña y optimiza pipelines de CI/CD para GitHub Actions y GitLab CI, incluyendo automatización de tests, linting, builds y deploys.

Scan infrastructure-as-code — Dockerfiles, Compose, Terraform, and GitHub Actions — for security misconfigurations like running as root, world-writable files, unpinned actions, and hardcoded secrets. Pure Claude Code, no signup.

Investigate a failing GitHub Actions job, extract the root cause, and file a well-structured bug issue against NVIDIA/Megatron-LM.

Inspect GitHub PR checks, fetch failing GitHub Actions logs, summarize failure context, then create a fix plan and implement after user approval.

Locates failing GitHub Actions checks on a pull request, fetches logs, summarizes failures, and proposes a fix plan for approval before implementing.

Creates a formal, AI-optimized specification for an existing GitHub Actions CI/CD workflow, focusing on behavior and requirements rather than implementation details.

Scans GitHub repositories for failing or stuck Actions workflows, diagnoses root causes, and applies fixes such as canceling stuck runs, re-running failed jobs, and cleaning runner caches.

Automates repetitive infrastructure and deployment tasks with Terraform, OpenTofu, Ansible, GitHub Actions, and n8n, enforcing safe practices like plan review and confirmation before applying changes.

Produces an evidence-backed inventory of live automations (jobs, hooks, connectors, MCP servers, wrappers) and recommends keep/merge/cut/fix-next actions before rewriting anything.

Interprets GitHub Actions run status and logs, diagnoses CI failure patterns, and suggests targeted fixes. Handles dependency install failures, test timeouts, build OOM, flaky tests, and workflow misconfigurations. Activate on: 'CI failing', 'build broken', 'workflow error', 'GitHub Actions debug', 'flaky CI', 'pipeline timeout', 'CI red'. NOT for: writing new workflows from scratch (use github-actions-pipeline-builder), CI caching strategy (use ci-cache-optimizer), deployment orchestration (use devops-automator).

Generates CI/CD pipeline configurations for Adobe App Builder projects, including GitHub Actions workflows, Azure DevOps, and GitLab CI templates with OAuth S2S secrets injection and multi-workspace promotion.