cicd-github-actions-pattern

What problem does it solve?

This Skill solves unreliable or inconsistent CI workflows by standardizing GitHub Actions validation, dependency auditing, and test matrix behavior with guardrails that prevent partial/incorrect releases.

Core Features & Use Cases

• GitHub Actions workflow validation: Validates each skill/workflow’s SKILL.md frontmatter (required name/description, length limits, YAML parsing) and enforces name == directory to catch catalog/registration mistakes early.
• Dependency security auditing: Adds a pip-audit workflow that performs CVE discovery on a schedule and reports findings without blocking PR merges.
• Deterministic test coverage patterns: Provides a test matrix setup that continues running across failing cells (fail-fast: false) and optionally restricts coverage reporting to a single matrix cell to reduce noise.
• Atomic commit enforcement: Documents and demonstrates how to ensure a new skill directory and its registration in install.sh land in the same commit, preventing CI transient failures.

Quick Start

Use the cicd-github-actions-pattern templates by copying validate.yml.template, pip-audit.yml.template, and test-matrix.yml.template into your repository’s .github/workflows folder, then commit and push to trigger the workflows.