1. Authentication (+3)
1. Authentication
- Use
gh auth loginfor initial setup - Store tokens securely in GitHub Secrets
- Use GITHUB_TOKEN in workflows
- Rotate tokens regularly
2. Rate Limiting
- Batch operations when possible
- Use GraphQL for complex queries
- Implement exponential backoff
- Cache API responses
3. Workflow Design
- Use reusable workflows
- Implement proper error handling
- Add meaningful commit messages
- Follow semantic versioning
4. Security
- Enable branch protection
- Require PR reviews
- Use signed commits
- Enable security scanning