github-actions

Automates .NET CI/CD with GitHub Actions workflows, Docker, and NuGet publishing.

20|3|Updated Aug 13, 2023

Search Tags:#ci/cd #docker #github-actions #workflows #codeql #sonarcloud #sbom

Ready to run

npx skills add https://github.com/duranserkan/DRN-Project --skill github-actions-duranserkan

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: github-actions
Source: https://github.com/duranserkan/DRN-Project/tree/main/.agent/skills/github-actions
Command: npx skills add https://github.com/duranserkan/DRN-Project --skill github-actions-duranserkan

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill standardizes and automates CI/CD pipelines using GitHub Actions workflows, enabling reliable builds, tests, and deployments across environments with security scanning and artifact publishing.

Core Features & Use Cases

Workflow Strategy: Defines branch-based workflows (develop, master, release, and preview tags) to manage build, test, and deployment cycles.
Composite Actions & Reuse: Utilizes shared actions to reduce duplication across workflows.
Docker & SBOM/Provenance: Builds multi-arch Docker images with SBOM generation and provenance attestation.
Package Publishing & Security: Automates NuGet package publishing and integrates SonarCloud and CodeQL analyses.
Best Practices: Enforces consistent naming, caching, and secret management to improve reliability and security.

Quick Start

Configure a workflow to build, test, and deploy your .NET project using the develop.yml and master.yml workflows.

Frequently Asked Questions about github-actions

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I set up GitHub Actions workflows for a .NET project?▼

You can set up GitHub Actions workflows for a .NET project by defining branch-based pipelines for develop, master, and release branches to automate builds, tests, and deployments. This approach uses composite actions to reduce duplication across workflows.

How do I generate SBOM and provenance for multi-arch Docker builds in CI/CD?▼

To generate SBOM and provenance for multi-arch Docker builds, your CI/CD pipeline should build the images and attach Software Bill of Materials and provenance attestations. This ensures artifact security and traceability across environments.

What is the best way to integrate CodeQL and SonarCloud security scans in GitHub Actions?▼

The best way to integrate CodeQL and SonarCloud scans is to add them as automated steps within your GitHub Actions workflows. This standardizes code security analysis and vulnerability detection across all branch pipelines.

Can I automate NuGet package publishing using GitHub Actions workflows?▼

Yes, you can automate NuGet package publishing using GitHub Actions workflows. The pipeline handles package creation and deployment to registries, often alongside Docker builds and security scans as part of the continuous integration process.

Does this GitHub Actions workflow strategy support preview tags and release branches?▼

Yes, this workflow strategy explicitly supports preview tags and release branches alongside develop and master. This structure manages distinct build, test, and deployment cycles tailored to different release stages.

Why use composite actions in GitHub Actions CI/CD pipelines?▼

You use composite actions in GitHub Actions to reduce duplication across multiple workflows. They enforce consistent naming, caching, and secret management, which improves overall pipeline reliability and security.