ghactions

What problem does it solve?

Provides a repeatable, secure, and optimized approach to creating and hardening GitHub Actions workflows so teams stop shipping fragile, slow, or insecure CI/CD pipelines.

Core Features & Use Cases

• Workflow discovery & audit: Detect existing workflows, unpinned actions, missing permissions, and absent timeouts to prioritize fixes.
• Workflow design & optimization: Create lint → test → deploy pipelines, matrix builds, caching strategies, shallow clones, and concurrency groups to reduce runtime.
• Security hardening & deployment gates: Pin actions to SHAs, enforce least-privilege permissions, restrict secret exposure, use OIDC, and configure environments with manual approvals and rollback.
• Use Case: Add a reproducible CI pipeline for a monorepo with per-package triggers, dependency caching, and a secure production deployment gate.

Quick Start

Use /godmode:ghactions to add or audit GitHub Actions workflows and automatically apply security and performance best practices for your repository.