When you need to bootstrap GitHub Actions for a project, this analyzes your tech stack by reading package.json, requirements.txt, or other manifest files, then generates appropriate workflow YAML files. It creates sensible defaults like ci.yml for tests and linting on push/PR, plus release and deploy workflows when relevant. The generated files include proper caching strategies, version matrices, and comments in Chinese explaining each step. It handles frontend specifics like Lighthouse checks and backend needs like Docker builds. The quality checklist it follows (fixed version tags, proper secrets references, timeout settings) means you get production-ready workflows instead of cargo-culted examples from Stack Overflow. Saves you from forgetting the lockfile cache key or setting up matrix testing wrong.

GitHub stars
328
last updated
May 13, 2026

Install

$ npx -y skills add laolaoshiren/claude-code-skills-zh --skill github-actions-gen --agent claude-code

Installs into .claude/skills of the current project.

Files

GitHub Actions CI/CD 生成器

核心原则

  • 先读项目,再生成 workflow。不要凭项目名猜测运行时、包管理器、测试命令或部署目标。
  • 默认只生成只读 CI。Release、部署、推送镜像、写回仓库和调用外部 webhook 必须先确认目标、凭据、环境保护与回滚方式。
  • 将不可信 PR 代码与 Secrets、写权限、自托管 Runner 隔离。不要为方便而改用 pull_request_target 执行 PR 代码。
  • 把所有 Action 固定到核验过的完整 40 位 commit SHA,并在旁边保留版本注释。不要使用 @main、@master、@latest 或可移动的 @vN tag。
  • 为每个 job 设置最小 permissions 和 timeout-minutes;不依赖仓库默认权限。
  • 生成后运行真实语法与项目命令验证,不把“配置看起来正确”当作通过。

工作流程

1. 盘点项目证据

  • 读取 manifest、lockfile、wrapper、运行时文件和现有 workflow,例如 package.json、.nvmrc、pyproject.toml、go.mod、Cargo.toml、Dockerfile 与 .github/workflows/。
  • 从项目脚本、贡献文档和现有 CI 确认 lint、test、build、package 命令。命令不存在时先指出缺口。
  • 识别 monorepo 边界、工作目录、矩阵维度、服务容器、缓存路径与产物。
  • 询问必要决策:触发分支、支持的运行时、部署目标、云账号、GitHub Environment、失败处理和发布授权。
  • 检查当前工作树,保留用户已有修改;只编辑本次授权的 workflow 和必要配置。

2. 建立威胁模型

Sponsors

Details

Repository
github.com/laolaoshiren/claude-code-skills-zh
Categories
DevOps & CI/CD, Git & Pull Requests
License
MIT
First seen
Jun 11, 2026

More from laolaoshiren/claude-code-skills-zh

All 19
1microsoft avatarazure-enterprise-infra-plannermicrosoft/github-copilot-for-azureArchitect and provision enterprise Azure infrastructure from workload descriptions. For cloud architects and platform engineers planning networking, identity, s0skills.sh installs
2microsoft avatarazure-kubernetesmicrosoft/azure-skillsPlan, create, and configure production-ready Azure Kubernetes Service (AKS) clusters. Covers Day-0 checklist, SKU selection (Automatic vs Standard), networking 527.5Kskills.sh installs
3cloudflare avatarsandbox-stablecloudflare/skillsBuild or maintain Cloudflare Sandbox apps on the stable @cloudflare/sandbox package. Use sandbox-next for preview apps and sandbox-migrate-to-next for stable-to80.2Kskills.sh installs
4cloudflare avatarsandbox-nextcloudflare/skillsBuild or maintain Cloudflare Sandbox apps on @cloudflare/sandbox@next (SDK 1.0 preview). Use sandbox-migrate-to-next when porting a stable app.79.4Kskills.sh installs
5warpdotdev avatardiagnose-ci-failureswarpdotdev/common-skillsDiagnose CI failures for a PR using the GitHub CLI, extract error logs, and generate a plan to fix them. Use when the user asks to check CI status, pull CI issu28.6Kskills.sh installs
6wshobson avatarterraform-module-librarywshobson/agentsBuild reusable Terraform modules for AWS, Azure, GCP, and OCI infrastructure following infrastructure-as-code best practices. Use when creating infrastructure m16.1Kskills.sh installs