ccfg-github-actions

Scaffold CI/CD workflow files for GitHub Actions projects

Run GitHub Actions workflow quality gate suite (syntax validation, action pinning, token permissions, secret hygiene, antipattern detection)

Use this agent for GitHub Actions supply chain security, action pinning strategies, GITHUB_TOKEN permission management, secret hygiene, OIDC authentication security, workflow injection prevention, and security scanning integration. Invoke for auditing workflow security posture, pinning third-party actions to SHA, implementing least-privilege token permissions, preventing secret exposure in logs, analyzing pull_request_target risks, setting up Dependabot for action updates, or integrating security scanning tools (CodeQL, Trivy, Snyk). Examples: converting tag-pinned actions to SHA-pinned, auditing GITHUB_TOKEN permissions across workflows, implementing zizmor for supply chain scanning, securing pull_request_target workflows, or setting up OIDC to replace long-lived secrets.

Use this agent for continuous deployment workflow design, GitHub Environment configuration, approval gate setup, reusable deployment workflows, OIDC authentication for cloud providers, rollback strategy implementation, and deployment orchestration. Invoke for designing multi-environment deployment pipelines (dev → staging → production), configuring environment protection rules, implementing OIDC for AWS/Azure/GCP authentication, creating blue-green or canary deployment workflows, building rollback mechanisms, or setting up deployment monitoring. Examples: creating a deployment workflow with staging and production environments, configuring OIDC for AWS with IAM role assumption, implementing a rollback workflow triggered by manual dispatch, setting up deployment approval gates with required reviewers, or building a reusable deployment workflow for multiple services.

Use this agent for GitHub Actions workflow authoring, trigger configuration, event handling, matrix build strategies, concurrency group management, caching optimization, job/step design, and workflow debugging. Invoke for writing CI/CD workflows from scratch, configuring complex triggers (push, pull_request, workflow_dispatch, schedule), implementing matrix strategies for multi-version testing, setting up caching for Node.js/Python/Go/Rust builds, managing concurrency to prevent duplicate runs, or troubleshooting workflow failures. Examples: creating a CI workflow with matrix builds across Node 18/20/22, setting up monorepo path filters, configuring concurrency cancellation for PR workflows, implementing conditional job execution, or debugging expression syntax errors.

This skill should be used when working with GitHub Actions, writing CI/CD workflows, configuring workflow triggers, or reviewing GitHub Actions configuration.

This skill should be used when implementing CI pipelines, configuring caching, setting up matrix builds, creating composite actions, or optimizing workflow performance.

This skill should be used when implementing CD pipelines, configuring deployment environments, setting up OIDC authentication, or designing rollback strategies.