skill-devops-github-actions

Implement GitHub Actions best practices by applying deterministic builds, caching, matrix builds, and reusable workflows across repositories to ensure robust CI/CD pipelines with reduced maintenance overhead.

Secrets management in GitHub Actions requires secure secret handling, action version pinning, and least-privilege access control to enforce security hardening and prevent unauthorized exposure across your CI/CD workflows.

Matrix builds in GitHub Actions allow deterministic CI/CD pipelines to run tests across multiple environments and configurations simultaneously, ensuring robust workflow validation and standardized testing patterns across repositories.

Pinned action versions are required for GitHub Actions security hardening to ensure deterministic builds, prevent supply chain attacks, and maintain robust workflow hygiene alongside strict permissions and access control.

Reusable workflows in GitHub Actions allow you to standardize CI/CD patterns across multiple repositories, reducing maintenance overhead and ensuring consistent caching, secrets handling, and workflow hygiene implementation.

GitHub Actions workflows fail without proper caching and least-privilege permissions, requiring security hardening guidelines and deterministic build configurations to resolve fragility and access control issues.