TechAICICDWorkflow

Category: Tools & Productivity | Uploader: pagopa | Downloads: 0 | Version: v1.0（Latest）

Create or modify secure GitHub Actions workflows for CI/CD pipelines.

Changelog: Source: GitHub https://github.com/pagopa/eng-azure-governance

Directory Structure

Current level: .github/skills/tech-ai-cicd-workflow/

📄 SKILL.md 1.2 KB

SKILL.md

---
name: TechAICICDWorkflow
description: Create or modify secure GitHub Actions workflows for CI/CD pipelines.
---

# CI/CD Workflow Skill

## When to use
- Create or modify workflows.
- Add CI/CD jobs.
- Add cloud auth for Terraform or deployment steps.

## Mandatory rules
- Prefer OIDC.
- Pin every action to a full-length SHA.
- Keep `permissions` least-privilege.
- Keep step names and operational output in English.

## Minimal workflow example
```yaml
name: CI
on: [pull_request]

permissions:
  contents: read
  id-token: write

jobs:
  validate:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@<FULL_LENGTH_COMMIT_SHA>
      - run: terraform fmt -check -recursive
```

## Auth snippets

### AWS
```yaml
- uses: aws-actions/configure-aws-credentials@<FULL_LENGTH_COMMIT_SHA>
```

### Azure
```yaml
- uses: azure/login@<FULL_LENGTH_COMMIT_SHA>
```

### GCP
```yaml
- uses: google-github-actions/auth@<FULL_LENGTH_COMMIT_SHA>
```

## Checklist
- [ ] OIDC configured.
- [ ] Actions pinned by SHA.
- [ ] `permissions` minimized.
- [ ] Environment protection enabled for production.
- [ ] Validation steps included (for example, `terraform fmt -check`).

Comments 0

Latest | Hot

Please login before commenting.

No comments yet. Be the first one!

TechAICICDWorkflow

Directory Structure

SKILL.md

Report

Notice