github-actions SKILL.md skillA

github-actions from siva01c/claude-plugins is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add siva01c/claude-plugins/github-actions@git:20260612.89eb1c8

Pins git:20260612.89eb1c8 in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
siva01c/claude-plugins
Path
cicd-tools/skills/github-actions/SKILL.md
Versions recorded
1
Latest version
git:20260612.89eb1c8, committed Jun 12, 2026
Size
5,234 bytes
Repository stars
16
License
MIT

Use this skill when authoring or debugging GitHub Actions workflows (.github/workflows/*.yml) — e.g. "add CI for this Drupal project on GitHub", "run phpcs/phpstan/phpunit on pull requests", "cache composer dependencies", "deploy over SSH when main is pushed", "why didn't my workflow trigger", or anything involving jobs, matrices, runners, secrets, or reusable workflows.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# GitHub Actions Skill

GitHub Actions runs workflows from `.github/workflows/*.yml`. This skill
covers workflow authoring with a Drupal project as the working example:
linting, static analysis, PHPUnit with a database service, and SSH/drush
deployment.

---

## Workflow anatomy

```yaml
name: CI

on:
  pull_request:
  push:
    branches: [main]

permissions:
  contents: read            # least privilege — grant more only per job

concurrency:
  group: ci-${{ github.ref }}
  cancel-in-progress: true  # newer push cancels the outdated run

jobs:
  phpcs:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: shivammathur/setup-php@v2
        with:
          php-version: '8.3'
          tools: composer:v2
      - uses: actions/cache@v4
        with:
          path: ~/.composer/cache
          key: composer-${{ hashFiles('composer.lock') }}
          restore-keys: composer-
      - run: composer install --no-progress
      - run: vendor/bin/phpcs --standard=Drupal,DrupalPractice web/modules/custom
```

Key defaults to always set:

- **`permissions:`** — the implicit token is powerful; start from
  `contents: read` and widen per job only when needed.
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add siva01c/claude-plugins/github-actions@sha256:86a7bdcdf0a3fe80

The line at the top of this page pins the label git:20260612.89eb1c8, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_2wma2vcwepa2yn5x.svg)](https://markdownregistry.com/a/art_2wma2vcwepa2yn5x)

7 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on Jun 12, 2026.

versioncommittedcommitsizeaudit
git:20260612.89eb1c8 latest2026-06-12 89eb1c8 5,234 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (5234 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

siva01c/claude-plugins · 16 stars · license MIT · pushed 2026-09-26 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_2wma2vcwepa2yn5x
GET https://markdownregistry.com/api/v1/resolve?ref=siva01c/claude-plugins/github-actions
GET https://markdownregistry.com/api/v1/blob/86a7bdcdf0a3fe80cddb71184eed2a735956826129e01bf2855b2ab79f23b2f4

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from siva01c/claude-plugins

gitlab-ci SKILL.md skill
siva01c/claude-plugins · cicd-tools/skills/gitlab-ci/SKILL.md · Use this skill when authoring or debugging GitLab CI/CD pipelines (.gitlab-ci.yml) — e.g. "add a CI pipeline for this…
git:20260612.89eb1c8 · audit A · 16 stars
drupal-ddev-operations SKILL.md skill
siva01c/claude-plugins · ddev-tools/skills/drupal-ddev-operations/SKILL.md · Use for operational Drupal 11 workflows in DDEV environments, including safe updates, backup-first procedures, and…
git:20260612.89eb1c8 · audit A · 16 stars
docker-compose SKILL.md skill
siva01c/claude-plugins · docker-tools/skills/docker-compose/SKILL.md · Use this skill when authoring or editing Docker Compose files (compose.yaml / docker-compose.yml), running…
git:20260612.89eb1c8 · audit A · 16 stars
docker-model SKILL.md skill
siva01c/claude-plugins · docker-tools/skills/docker-model/SKILL.md · Use this skill when running local AI models with Docker Model Runner — the `docker model` CLI — e.g. "run an LLM…
git:20260612.89eb1c8 · audit B · 16 stars
drupal-module-development SKILL.md skill
siva01c/claude-plugins · drupal-dev-tools/skills/drupal-module-development/SKILL.md · Use when creating or extending Drupal 11 custom modules, including scaffolding, service architecture, and dependency…
git:20260612.89eb1c8 · audit A · 16 stars
drupal-security-review SKILL.md skill
siva01c/claude-plugins · drupal-dev-tools/skills/drupal-security-review/SKILL.md · Use when auditing Drupal 11 custom modules/themes for security issues such as unsafe input handling, XSS risks, SQL…
git:20260312.bfb9278 · audit A · 16 stars
git-worktree SKILL.md skill
siva01c/claude-plugins · git-tools/skills/git-worktree/SKILL.md · Use this skill whenever a task involves running parallel work on a git repository without conflicts — e.g. "fix this…
git:20260612.89eb1c8 · audit A · 16 stars
dry SKILL.md skill
siva01c/claude-plugins · quality-tools/skills/dry/SKILL.md · DRY (Don't Repeat Yourself) review rules for code reviews: find the same knowledge — a rule, a constant, a parser, a…
git:20260926.287ec94 · audit A · 16 stars
solid SKILL.md skill
siva01c/claude-plugins · quality-tools/skills/solid/SKILL.md · SOLID design review rules (SRP, OCP, LSP, ISP, DIP) for code reviews: what counts as a real design finding, what is…
git:20260926.287ec94 · audit A · 16 stars
owasp-asvs SKILL.md skill
siva01c/claude-plugins · security-tools/skills/owasp-asvs/SKILL.md · OWASP ASVS v5.0 security verification skill with Drupal 11 mappings. Use when performing security code reviews…
git:20260612.89eb1c8 · audit A · 16 stars
deploy-workflow SKILL.md skill
siva01c/claude-plugins · workflow-tools/skills/deploy-workflow/SKILL.md · Safe deployment workflow for Drupal 10/11 sites: pre-flight checks, backup, the correct update sequence (composer…
git:20260710.f6f3974 · audit A · 16 stars
feature-workflow SKILL.md skill
siva01c/claude-plugins · workflow-tools/skills/feature-workflow/SKILL.md · Phased workflow for delivering a Drupal feature or non-trivial change: plan, implement, review, test, finalize. Use…
git:20260710.f6f3974 · audit A · 16 stars

Every file in siva01c/claude-plugins

Other files named github-actions

github-actions SKILL.md skill
ericrisco/rsc-harness · skills/github-actions/SKILL.md · Use when authoring or fixing GitHub Actions CI/CD — workflows under .github/workflows, triggers, job matrix, caching…
git:20260729.baa11e7 · audit A · 236 stars
github-actions SKILL.md skill
openhands/extensions · skills/github-actions/SKILL.md · Create, debug, and test GitHub Actions workflows and custom actions. Use when building CI/CD pipelines, automating…
git:20260608.e56c5ef · audit A · 171 stars
github-actions SKILL.md skill
nitinjain999/platform-skills · skills/github-actions/SKILL.md · Design, review, secure, and debug GitHub Actions workflows — reusable workflows, OIDC federation, SHA pinning, token…
git:20261011.e8166a5 · audit A · 70 stars
github-actions SKILL.md skill
nitinjain999/platform-skills · plugins/platform-skills/skills/github-actions/SKILL.md · Design, review, secure, and debug GitHub Actions workflows — reusable workflows, OIDC federation, SHA pinning, token…
git:20261018.90b97a9 · audit A · 70 stars
github-actions SKILL.md skill
nahid-sparktales/agent-dispatcher · skills/devops/github-actions/SKILL.md · Write and review GitHub Actions workflows that fail honestly and finish fast enough to be trusted — least-privilege…
git:20260919.a0d4f55 · audit A · 59 stars
github-actions SKILL.md skill
opensourceagi/dev-tools-starter-agent · skills/github-actions/SKILL.md · How to set up the GitHub Actions workflows from the qwksearch reference CI — a discovered per-package test matrix with…
git:20260910.d17d88a · audit A · 38 stars
github-actions SKILL.md skill
skillmedev/skills · skills/github-actions/SKILL.md · Designs and hardens GitHub Actions CI/CD - pipelines that hit a sub-10-minute PR feedback budget through caching and…
git:20261005.bea4ea5 · audit A · 19 stars
github-actions SKILL.md skill
fmind/dot · skills/github-actions/SKILL.md · Build GitHub Actions CI/CD and agentic workflows; Dependabot, Lefthook, and zizmor audits.
git:20261016.677e587 · audit A · 12 stars

Browse by kind, by grade A, or by owner.