github-actions

Generate secure GitHub Actions workflows from predefined templates for Node, Python, and Docker.

8|2|Updated Feb 9, 2026

Search Tags:#automation #workflow #templates #security #yaml #github-actions #ci

Ready to run

npx skills add https://github.com/mikeparcewski/wicked-garden --skill github-actions-mikeparcewski

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: github-actions
Source: https://github.com/mikeparcewski/wicked-garden/tree/main/skills/platform/github-actions
Command: npx skills add https://github.com/mikeparcewski/wicked-garden --skill github-actions-mikeparcewski

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pyyaml, and includes scripts (resource) components.

What problem does it solve?

Write secure, optimized GitHub Actions workflows with reproducible results and minimal risk.

Core Features & Use Cases

Explicit Permissions: declare only what's needed for each job.
Pinned Actions & Caches: ensure stability and performance.
Template-Driven Generation: generate workflows from proven templates for common stacks like Node, Python, and Docker.
Deployment & Security: supports OIDC-based deployments and safe PR handling.

Quick Start

Detect your project type and generate a secure workflow using the built-in templates.

Frequently Asked Questions about github-actions

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I generate secure GitHub Actions workflows for CI/CD?▼

Generate secure GitHub Actions workflows by using template-driven automation that enforces explicit permissions, action pinning, and input sanitization. This approach produces reproducible CI/CD pipelines with minimal security risk across Node, Python, and Docker stacks.

What's the best way to enforce explicit permissions in GitHub Actions?▼

Enforce explicit permissions in GitHub Actions by declaring only the access needed for each job within a template-driven workflow. This ensures pipelines follow least-privilege principles, reducing the attack surface and satisfying strict security requirements.

Does this GitHub Actions automation support Node, Python, and Docker stacks?▼

Yes, this GitHub Actions automation supports Node, Python, and Docker stacks. It detects your project type and generates proven, repeatable CI/CD workflows tailored to the specific build and deployment needs of those environments.

How do I pin actions and caches to ensure CI pipeline stability?▼

Pin actions and caches by generating workflows from predefined templates that enforce version pinning for all action dependencies. This ensures CI pipeline stability, prevents unexpected breaking changes, and optimizes performance through cached dependencies.

Can I use OIDC-based deployments and safe PR handling with these GitHub Actions templates?▼

Yes, these GitHub Actions templates support OIDC-based deployments and safe PR handling. The automation incorporates secure deployment patterns and sanitized pull request workflows to maintain pipeline reliability and security.

Do I need pyyaml to automate GitHub Actions workflow generation?▼

Yes, you need the pyyaml dependency installed to automate GitHub Actions workflow generation. The Skill relies on this Python library to parse, process, and output the YAML structure required for valid GitHub Actions pipelines.