generate-ci

Auto-generating GitHub Actions CI workflows is done by detecting project languages and package managers like pip, poetry, npm, and pnpm. The tool then produces best-practice CI files with linting, testing, and security scanning tailored to your setup.

Generated GitHub Actions workflows include security scanning using gitleaks, CodeQL, and Trivy, alongside dependency management automation through Renovate and Dependabot. This ensures your pipeline automatically detects vulnerabilities and manages package updates.

You can generate CI workflows for Terraform projects alongside Python and TypeScript. The tool detects Terraform configurations in your directory and produces a workflow file with the appropriate validation steps and minimal GITHUB_TOKEN permissions.

Securing GitHub Actions workflows with SHA-pinned actions is achieved by generating files that enforce SHA pinning for all action references. This approach prevents supply chain attacks by ensuring immutable action versions and applying minimal token permissions.

The generated CI workflow supports the uv package manager for Python, alongside pip and poetry. It detects your project's specific package manager configuration and tailors the installation, linting, and testing steps accordingly.