How do these templates handle security best practices?

The templates include specific security scanning patterns using tools like Trivy and Snyk, and follow the principle of least privilege by defining specific job permissions.

Are the workflows optimized for build speed?

Yes, the templates incorporate dependency caching, optimized Docker build layers, and matrix strategies to minimize execution time and reduce Action minute usage.

Do these workflows support languages other than Node.js?

While many examples use Node.js, the logic for Docker, Kubernetes, and matrix builds is language-agnostic and can be adapted for Python, Go, Java, or any other ecosystem.

Can I use these templates for private repositories?

Yes, these patterns are designed to work with both public and private repositories, leveraging GitHub Secrets and environment variables for secure data management.

GitHub Actions CI/CD Templates

Name: GitHub Actions CI/CD Templates
Author: HermeticOrmus

byHermeticOrmus

デプロイメントとDevOps

Generates production-ready GitHub Actions workflows for automated testing, building, and multi-platform deployment.

概要

This skill provides a comprehensive library of standardized GitHub Actions templates designed to streamline continuous integration and delivery. It enables developers to quickly implement robust workflows for Node.js testing, Docker image creation, Kubernetes deployments, and automated security scanning. By following industry best practices such as matrix builds, secrets management, and reusable workflow patterns, it ensures that your CI/CD pipelines are efficient, secure, and maintainable across diverse technology stacks and cloud environments.

主な機能

Standardized testing workflows with multi-version matrix build support
Reusable workflow structures to promote modular and dry CI/CD logic
Production-grade Kubernetes deployment patterns with AWS EKS integration
Automated Docker image construction and pushing to container registries
0 GitHub stars
Integrated security scanning using Trivy and Snyk for vulnerability detection

ユースケース

Implementing secure, approval-gated deployment pipelines for production environments
Automating the build and release of Dockerized microservices to cloud registries
Setting up automated linting and unit testing for every pull request

概要

主な機能

Standardized testing workflows with multi-version matrix build support
Reusable workflow structures to promote modular and dry CI/CD logic
Production-grade Kubernetes deployment patterns with AWS EKS integration
Automated Docker image construction and pushing to container registries
0 GitHub stars
Integrated security scanning using Trivy and Snyk for vulnerability detection

ユースケース

Implementing secure, approval-gated deployment pipelines for production environments
Automating the build and release of Dockerized microservices to cloud registries
Setting up automated linting and unit testing for every pull request