CI/CD with GitHub Actions

Created by CodeCraft LLC

Write, advise on, and review GitHub Actions workflows

Product and technology names are trademarks of their respective owners, used only to identify what this skill covers. CodeCraft LLC is not affiliated with or endorsed by them.

by Jace (@jamick)v1.2.0 · updated 2026-10-16Report copyright infringement

Description

Write, advise on, and review GitHub Actions workflows — triggers, jobs and matrices, caching (setup-node/setup-dotnet), least-privilege GITHUB_TOKEN permissions, pinning third-party actions to commit SHAs, secrets and environments with approvals, OIDC to cloud providers, script-injection and pull_request_target risks, concurrency and timeouts, reusable workflows and composite actions, artifacts, and CI pipelines for Node/Next.js, Expo/EAS, and .NET. Use whenever .github/workflows/*.yml exists or the user wants CI/CD, automated tests/lint/build on PRs, deploy pipelines, release automation, or asks why a workflow is slow, failing, or insecure.

#devops#github#actions

Included with all-access

$9.00 value as a single download

AiSkillz is in preview: browse the catalogue now - skill downloads and subscriptions open soon.

All skills are included with the all-access subscription

Changelog

v1.2.0Oct 16, 2026Latest

Added

references/multi-environment-pipelines.md: multi-environment pipelines (build once and promote, environment approvals, migrations, Helm rollback, semantic release) - merged from the former cicd-pipeline-design skill.

v1.1.0Oct 3, 2026

Changed

Checked against the official documentation (October 2026).
Added the Node 20 to Node 24 action runtime migration (Node 24 default June 2026, Node 20 removed September 2026) and bumping SHA-pinned actions that still declare node20.
Added enforcing SHA pinning through allowed-actions policies, and 1 pitfall.

v1.0.1Oct 3, 2026

Changed

Renamed the title to describe what the skill does with the product, so it doesn't read as an official or endorsed edition.
Added a trademark notice to the README.

v1.0.0Oct 2, 2026

Added

First release.