github-actions-expertlisted

# GitHub Actions Expert ## Workflow 1. **Analyser le pipeline requis**, Identifier les étapes (build, test, lint, SAST, déploiement), les triggers adaptés et les branches concernées. | Trigger | Quand l'utiliser | |---------|-----------------| | `push` sur `main` | CI post-merge, déploiement continu | | `pull_request` | Validation avant merge, checks obligatoires | | `schedule` | Jobs de maintenance, audit de sécurité nocturne | | `workflow_dispatch` | Déploiement manuel avec paramètres | | `release` (published) | Publication de packages, binaires | 2. **Structurer le YAML**, Organiser les jobs avec dépendances explicites et conditions. ```yaml name: CI on: push: branches: [main] pull_request: branches: [main] permissions: # Principe du moindre privilège global contents: read jobs: build: runs-on: ubuntu-latest permissions: contents: read steps: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version: '22' cache: 'npm' - run: npm ci - run: npm run build test: needs: build runs-on: ubuntu-latest steps: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 - run: npm ci && npm test ``` 3. **Configurer les matrix builds*