github-actions-cicd

What problem does it solve?

This Skill automates secure CI/CD pipelines using GitHub Actions to automate testing, security scanning, performance auditing, and deployment.

Core Features & Use Cases

• Code Quality & Linting: Ensure code quality with linting and formatting checks.
• Security Scanning: Integrate CodeQL, Dependabot, and ZAP for vulnerability scanning.
• Performance Audits: Run Lighthouse checks and budgets to guard UX and performance targets.
• Deployment & Approvals: Deploy to environments with production gating and explicit approvals.

Quick Start

Create a workflow file named ci-cd-pipeline.yml and configure steps to checkout the repository, install dependencies, run validation and lint tasks, initialize CodeQL, perform ZAP baseline scans, run Lighthouse CI, and deploy to AWS with a CloudFront invalidation when on the main branch.