What problem does it solve? Setting up a production-grade CI/CD pipeline for a Go project involves dozens of decisions — test flags, lint configuration, security scanners, dependency update automation, release tooling, and repository security settings — and getting any of them wrong leads to flaky builds, missed vulnerabilities, or unsafe automation. This Skill provides audited, ready-to-adapt GitHub Actions workflows and configurations so nothing critical is forgotten. ## Core Features & Use Cases - Complete workflow templates: Test (with -race, -shuffle=on, coverage), integration tests with service containers, golangci-lint, security scanning (govulncheck, gosec, CodeQL, Bearer), Docker multi-platform builds with SBOM/provenance, and GoReleaser release pipelines for CLIs, libraries, and monorepos. - Dependency automation: Dependabot and Renovate configurations with minor/patch grouping, plus an auto-merge workflow with documented security guardrails. - AI-driven code review: Claude Code Action and GitHub Copilot review setups that apply Go-specific review skills across quality, correctness, security, and performance jobs. - Use Case: You just created a new open-source Go library and need CI before the first external contribution. The Skill generates the test, lint, security, and release workflows, configures Dependabot, and walks you through branch protection and least-privilege token settings. ## Quick Start Ask the agent to set up a complete GitHub Actions CI pipeline for your Go project, including tests, linting, security scanning, and a GoReleaser release workflow.
