What problem does it solve? Writing GitHub Actions workflows from scratch often leads to inconsistent conventions, overly broad permissions, unsafe trigger patterns, and release pipelines that skip critical verification steps. This Skill applies repository-native GitHub Actions patterns so workflows are scoped, least-privilege, and aligned with existing monorepo conventions. ## Core Features & Use Cases - Service-scoped CI workflows: Generate PR, push, and manual-dispatch CI with paths filters, project-prefixed names, minimal permissions, and concurrency controls. - Release and image publication: Create tag-driven GitHub Release workflows and container image publish workflows with tag lineage checks, immutable tags, SBOM, provenance, and digest manifests. - Bot-safe merge automation: Build Dependabot auto-merge workflows that scope by actor and changed files without executing untrusted PR code. - Use Case: You are adding a new Python service to a monorepo and need PR CI, a tag-driven release workflow, and an image publish workflow. The Skill renders all three from templates, aligned with repo conventions and validated locally. ## Quick Start Ask the agent to use the github-workflows skill to create a PR CI workflow and a tag-driven release workflow for your service directory.
