GitHub Actions Composite Creator

关于

The github-actions-composite skill helps developers architect robust CI/CD components by generating standardized action.yml files. It simplifies the process of bundling multiple workflow steps into reusable units, handling complex input/output mappings, and integrating github-script for JavaScript-based logic. Most importantly, it enforces critical security standards like mandatory commit SHA pinning and safe environment variable handling for untrusted inputs, ensuring your automated workflows are both efficient and secure from supply chain attacks.

主要功能

• 0 GitHub stars
• Standardized action.yml scaffolding for inputs, outputs, and composite runs
• Automated enforcement of commit SHA pinning for external actions
• Support for conditional steps, multi-line scripts, and custom shell environments
• Secure integration patterns for github-script and Octokit API access
• Safe input handling patterns to prevent shell and script injection

使用场景

• Refactoring repetitive CI/CD workflow steps into a single reusable internal action
• Developing public GitHub Actions with strictly validated inputs and secure defaults
• Orchestrating complex automation tasks that require combining shell commands with JavaScript logic