generate-ci

Name: generate-ci
Availability: InStock
Author: yasuwrldhyper

Generate GitHub Actions CI workflows with SHA-pinned actions and security scanning.

Updated Mar 7, 2026

Search Tags:#automation #typescript #devops #python #github actions #workflow generation #ci

Ready to run

npx skills add https://github.com/yasuwrldhyper/ai-skills-collection --skill generate-ci

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: generate-ci
Source: https://github.com/yasuwrldhyper/ai-skills-collection/tree/main/skills/generate-ci
Command: npx skills add https://github.com/yasuwrldhyper/ai-skills-collection --skill generate-ci

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates the creation of robust GitHub Actions CI workflow files, saving developers significant time and effort in setting up their CI/CD pipelines.

Core Features & Use Cases

Language Detection: Automatically identifies project languages (Python, TypeScript, Terraform) and package managers (pip, uv, poetry, npm, yarn, pnpm).
Best-Practice Workflows: Generates workflows with SHA-pinned actions, minimal permissions, security scanning (gitleaks, CodeQL, Trivy), and dependency management (Renovate, Dependabot).
Use Case: A developer starting a new Python project can use /generate-ci to instantly get a fully configured CI workflow that includes linting, testing, building, and security scanning, tailored to their project's specific setup.

Quick Start

Generate a GitHub Actions CI workflow for the current project directory.

Frequently Asked Questions about generate-ci

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I auto-generate GitHub Actions CI workflows for Python and TypeScript projects?▼

Auto-generating GitHub Actions CI workflows is done by detecting project languages and package managers like pip, poetry, npm, and pnpm. The tool then produces best-practice CI files with linting, testing, and security scanning tailored to your setup.

Do generated GitHub Actions workflows include security scanning and dependency management?▼

Generated GitHub Actions workflows include security scanning using gitleaks, CodeQL, and Trivy, alongside dependency management automation through Renovate and Dependabot. This ensures your pipeline automatically detects vulnerabilities and manages package updates.

Can I generate CI workflows for Terraform projects with this tool?▼

You can generate CI workflows for Terraform projects alongside Python and TypeScript. The tool detects Terraform configurations in your directory and produces a workflow file with the appropriate validation steps and minimal GITHUB_TOKEN permissions.

What is the best way to secure GitHub Actions workflows with SHA-pinned actions?▼

Securing GitHub Actions workflows with SHA-pinned actions is achieved by generating files that enforce SHA pinning for all action references. This approach prevents supply chain attacks by ensuring immutable action versions and applying minimal token permissions.

Does the generated CI workflow support the uv package manager for Python?▼

The generated CI workflow supports the uv package manager for Python, alongside pip and poetry. It detects your project's specific package manager configuration and tailors the installation, linting, and testing steps accordingly.