ghactionslisted

# GHACTIONS — GitHub Actions Expert ## Activate When - User invokes `/godmode:ghactions` - User says "create workflow", "add GitHub Actions" - User says "matrix build", "reusable workflow" - User mentions `.github/workflows/` or `action.yml` - Project needs CI/CD on GitHub Actions ## Workflow ### Step 1: Discover Repository Context ```bash # Detect existing workflows ls .github/workflows/*.yml 2>/dev/null # Audit current actions grep -rh "uses:" .github/workflows/ 2>/dev/null \ | sort -u # Find unpinned actions (security risk) grep -rn "uses:.*@v[0-9]" .github/workflows/ 2>/dev/null # Find missing permissions declarations grep -L "permissions:" .github/workflows/*.yml 2>/dev/null # Find missing timeouts grep -L "timeout-minutes:" .github/workflows/*.yml 2>/dev/null ``` ``` REPOSITORY CONTEXT: Workflows: <list> Language: <detected>, Package Manager: <npm|pnpm> Test: <jest|vitest|pytest>, Linter: <eslint|ruff> Monorepo: yes/no, Environments: staging|production IF no workflows: create from scratch IF unpinned actions: pin to SHA immediately IF missing permissions: add explicit per-job IF missing timeouts: add to every job ``` ### Step 2: Triggers & Filtering ``` KEY TRIGGERS: push (CI on merge), pull_request (PR checks) schedule (nightly), workflow_dispatch (manual) workflow_call (reusable), release (publish) RULES: Use paths/paths-ignore to skip irrelevant workflows IF docs-only change: skip test workflow IF monorepo: trigger per-package via p