Github Actions Cicd

A solid reference for setting up GitHub Actions pipelines with security baked in from the start. You get working examples for CodeQL scanning, ZAP security tests, Lighthouse performance audits, and AWS deployments using OIDC instead of storing credentials. The workflow structure is practical: validation, security scanning, performance checks, then deployment with proper job dependencies. What stands out is the emphasis on least-privilege IAM roles and pinning action versions with commit SHAs, which most quickstart guides skip. If you're moving beyond basic CI/CD and need to satisfy security requirements without reinventing the wheel, this gives you a tested pattern to start from.

skills.sh installs: 142
GitHub stars: 14
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add hack23/homepage --skill github-actions-cicd --agent claude-code

Installs into .claude/skills of the current project.

Files

GitHub Actions CI/CD Skill

Purpose

Defines CI/CD pipeline best practices using GitHub Actions for automated testing, security scanning, and deployment.

Rules

Workflow Structure

MUST INCLUDE:

Code quality checks (linting, formatting)
Security scanning (CodeQL, Dependabot, ZAP)
Performance audits (Lighthouse)
Build and minification
Deployment (with approval for production)

Example Workflow:

name: CI/CD Pipeline

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

permissions:
  contents: read
  security-events: write

jobs:
  validate:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Validate HTML
        run: npm run validate:html
      - name: Lint CSS
        run: npm run lint:css

  security-scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Initialize CodeQL
        uses: github/codeql-action/init@v3
      - name: Perform CodeQL Analysis
        uses: github/codeql-action/analyze@v3
      - name: ZAP Baseline Scan
        uses: zaproxy/action-baseline@v0.10.0
        with:
          target: 'https://www.hack23.com'

SKILL.md on GitHub