Design, review, secure, and debug GitHub Actions workflows — reusable workflows, OIDC federation, SHA pinning, token scoping, promotion orchestration, and CI failure diagnosis.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# GitHub Actions Command
Structured guidance for designing, hardening, reviewing, and debugging GitHub Actions workflows.
## Activation
```
/platform-skills:github-actions design # reusable workflow or job graph design
/platform-skills:github-actions security # OIDC, SHA pinning, token scoping, secrets hygiene
/platform-skills:github-actions review # production-readiness checklist for an existing workflow
/platform-skills:github-actions debug # diagnose a failing workflow or job
```
---
## Interactive Wizard (fires when no mode is provided)
When invoked with no arguments, ask before proceeding:
**Q1 — Mode?**
```
What do you need?
1. design — reusable workflow, job graph, promotion pipeline
2. security — OIDC federation, SHA pinning, token scoping, secret hygiene
3. review — production-readiness checklist for an existing workflow file
4. debug — job failure, permission error, OIDC rejection, missing context
Enter 1–4 or mode name:
```
**Q2 — Context** (after mode selected):
- **design**: `Describe what the workflow should do — validate, build, promote, deploy?`
…
The line at the top of this page pins the label git:20261018.90b97a9, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
GET https://markdownregistry.com/api/v1/artifacts/art_zocchsjbmtnzu2ex
GET https://markdownregistry.com/api/v1/resolve?ref=nitinjain999/platform-skills/github-actions
GET https://markdownregistry.com/api/v1/blob/f877b65aceb48d66fc759134cedede3d9421f62ee1842745c5990facdadcacc9
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
nitinjain999/platform-skills · .github/skills/code-review/SKILL.md · Review pull requests to this repo (a Claude Code / Copilot / Cursor platform-engineering skill plugin) for technical…
nitinjain999/platform-skills · SKILL.md · Use when troubleshooting, implementing, reviewing, or auditing platform infrastructure as a system — where Kubernetes…
nitinjain999/platform-skills · plugins/platform-skills/skills/ai-governance/SKILL.md · Generate and enforce policy gates for AI coding agents (Copilot, Claude Code) — real-time session hooks that deny…
ericrisco/rsc-harness · skills/github-actions/SKILL.md · Use when authoring or fixing GitHub Actions CI/CD — workflows under .github/workflows, triggers, job matrix, caching…
openhands/extensions · skills/github-actions/SKILL.md · Create, debug, and test GitHub Actions workflows and custom actions. Use when building CI/CD pipelines, automating…
nahid-sparktales/agent-dispatcher · skills/devops/github-actions/SKILL.md · Write and review GitHub Actions workflows that fail honestly and finish fast enough to be trusted — least-privilege…
opensourceagi/dev-tools-starter-agent · skills/github-actions/SKILL.md · How to set up the GitHub Actions workflows from the qwksearch reference CI — a discovered per-package test matrix with…
skillmedev/skills · skills/github-actions/SKILL.md · Designs and hardens GitHub Actions CI/CD - pipelines that hit a sub-10-minute PR feedback budget through caching and…
siva01c/claude-plugins · cicd-tools/skills/github-actions/SKILL.md · Use this skill when authoring or debugging GitHub Actions workflows (.github/workflows/*.yml) — e.g. "add CI for this…
