github-actions-ci

SKILL.md

---
name: github-actions-ci
description: Use when adding or fixing CI workflows. Generates idempotent GitHub Actions with caching, matrix builds, and proper secret scoping.
---

# GitHub Actions CI

When writing or editing `.github/workflows/`:

1. Pin actions to a specific tag or SHA — never `@latest`.
2. Cache `node_modules`, `.next/cache`, `~/.cargo` with `actions/cache` keyed on the relevant lockfile hash.
3. Run lint + typecheck + test in parallel jobs, not sequentially. Use a single setup job that publishes artefacts.
4. Secrets: scope to environment (`environment: production`), never leak to PR runs from forks.
5. Concurrency: `concurrency: { group: ${{ github.ref }}, cancel-in-progress: true }` so pushing twice cancels the older run.

Tag