{"id":"github-actions-templates","name":"github-actions-templates","summary":"自動化されたテスト、ビルド、デプロイのための本番対応のGitHubアクションワークフローを作成します。","body":"# GitHub Actions Templates\n\nProduction-ready GitHub Actions workflow patterns for testing, building, and deploying applications.\n\n## Purpose\n\nCreate efficient, secure GitHub Actions workflows for continuous integration and deployment across various tech stacks.\n\n## When to Use\n\n- Automate testing and deployment\n- Build Docker images and push to registries\n- Deploy to Kubernetes clusters\n- Run security scans\n- Implement matrix builds for multiple environments\n\n## Common Workflow Patterns\n\n### Pattern 1: Test Workflow\n\n```yaml\nname: Test\n\non:\n  push:\n    branches: [main, develop]\n  pull_request:\n    branches: [main]\n\njobs:\n  test:\n    runs-on: ubuntu-latest\n\n    strategy:\n      matrix:\n        node-version: [18.x, 20.x]\n\n    steps:\n      - uses: actions/checkout@v4\n\n      - name: Use Node.js ${{ matrix.node-version }}\n        uses: actions/setup-node@v4\n        with:\n          node-version: ${{ matrix.node-version }}\n          cache: \"npm\"\n\n      - name: Install dependencies\n        run: npm ci\n\n      - name: Run linter\n        run: npm run lint\n\n      - name: Run tests\n        run: npm test\n\n      - name: Upload coverage\n        uses: codecov/codecov-action@v4\n        with:\n          files: ./coverage/lcov.info\n```\n\n**Reference:** See `assets/test-workflow.yml`\n\n### Pattern 2: Build and Push Docker Image\n\n```yaml\nname: Build and Push\n\non:\n  push:\n    branches: [main]\n    tags: [\"v*\"]\n\nenv:\n  REGISTRY: ghcr.io\n  IMAGE_NAME: ${{ github.repository }}\n\njobs:\n  build:\n    runs-on: ubuntu-latest\n    permissions:\n      contents: read\n      packages: write\n\n    steps:\n      - uses: actions/checkout@v4\n\n      - name: Log in to Container Registry\n        uses: docker/login-action@v3\n        with:\n          registry: ${{ env.REGISTRY }}\n          username: ${{ github.actor }}\n          password: ${{ secrets.GITHUB_TOKEN }}\n\n      - name: Extract metadata\n        id: meta\n        uses: docker/metadata-action@v5\n        with:\n          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}\n          tags: |\n            type=ref,event=branch\n            type=ref,event=pr\n            type=semver,pattern={{version}}\n            type=semver,pattern={{major}}.{{minor}}\n\n      - name: Build and push\n        uses: docker/build-push-action@v5\n        with:\n          context: .\n          push: true\n          tags: ${{ steps.meta.outputs.tags }}\n          labels: ${{ steps.meta.outputs.labels }}\n          cache-from: type=gha\n          cache-to: type=gha,mode=max\n```\n\n**Reference:** See `assets/deploy-workflow.yml`\n\n### Pattern 3: Deploy to Kubernetes\n\n```yaml\nname: Deploy to Kubernetes\n\non:\n  push:\n    branches: [main]\n\njobs:\n  deploy:\n    runs-on: ubuntu-latest\n\n    steps:\n      - uses: actions/checkout@v4\n\n      - name: Configure AWS credentials\n        uses: aws-actions/configure-aws-credentials@v4\n        with:\n          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}\n          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}\n          aws-region: us-west-2\n\n      - name: Update kubeconfig\n        run: |\n          aws eks update-kubeconfig --name production-cluster --region us-west-2\n\n      - name: Deploy to Kubernetes\n        run: |\n          kubectl apply -f k8s/\n          kubectl rollout status deployment/my-app -n production\n          kubectl get services -n production\n\n      - name: Verify deployment\n        run: |\n          kubectl get pods -n production\n          kubectl describe deployment my-app -n production\n```\n\n### Pattern 4: Matrix Build\n\n```yaml\nname: Matrix Build\n\non: [push, pull_request]\n\njobs:\n  build:\n    runs-on: ${{ matrix.os }}\n\n    strategy:\n      matrix:\n        os: [ubuntu-latest, macos-latest, windows-latest]\n        python-version: [\"3.9\", \"3.10\", \"3.11\", \"3.12\"]\n\n    steps:\n      - uses: actions/checkout@v4\n\n      - name: Set up Python\n        uses: actions/setup-python@v5\n        with:\n          python-version: ${{ matrix.python-version }}\n\n      - name: Install dependencies\n        run: |\n          python -m pip install --upgrade pip\n          pip install -r requirements.txt\n\n      - name: Run tests\n        run: pytest\n```\n\n**Reference:** See `assets/matrix-build.yml`\n\n## Workflow Best Practices\n\n1. **Use specific action versions** (@v4, not @latest)\n2. **Cache dependencies** to speed up builds\n3. **Use secrets** for sensitive data\n4. **Implement status checks** on PRs\n5. **Use matrix builds** for multi-version testing\n6. **Set appropriate permissions**\n7. **Use reusable workflows** for common patterns\n8. **Implement approval gates** for production\n9. **Add notification steps** for failures\n10. **Use self-hosted runners** for sensitive workloads\n\n## Reusable Workflows\n\n```yaml\n# .github/workflows/reusable-test.yml\nname: Reusable Test Workflow\n\non:\n  workflow_call:\n    inputs:\n      node-version:\n        required: true\n        type: string\n    secrets:\n      NPM_TOKEN:\n        required: true\n\njobs:\n  test:\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions/checkout@v4\n      - uses: actions/setup-node@v4\n        with:\n          node-version: ${{ inputs.node-version }}\n      - run: npm ci\n      - run: npm test\n```\n\n**Use reusable workflow:**\n\n```yaml\njobs:\n  call-test:\n    uses: ./.github/workflows/reusable-test.yml\n    with:\n      node-version: \"20.x\"\n    secrets:\n      NPM_TOKEN: ${{ secrets.NPM_TOKEN }}\n```\n\n## Security Scanning\n\n```yaml\nname: Security Scan\n\non:\n  push:\n    branches: [main]\n  pull_request:\n    branches: [main]\n\njobs:\n  security:\n    runs-on: ubuntu-latest\n\n    steps:\n      - uses: actions/checkout@v4\n\n      - name: Run Trivy vulnerability scanner\n        uses: aquasecurity/trivy-action@0.28.0\n        with:\n          scan-type: \"fs\"\n          scan-ref: \".\"\n          format: \"sarif\"\n          output: \"trivy-results.sarif\"\n\n      - name: Upload Trivy results to GitHub Security\n        uses: github/codeql-action/upload-sarif@v3\n        with:\n          sarif_file: \"trivy-results.sarif\"\n\n      - name: Run Snyk Security Scan\n        uses: snyk/actions/node@0.4.0\n        env:\n          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}\n```\n\n## Deployment with Approvals\n\n```yaml\nname: Deploy to Production\n\non:\n  push:\n    tags: [\"v*\"]\n\njobs:\n  deploy:\n    runs-on: ubuntu-latest\n    environment:\n      name: production\n      url: https://app.example.com\n\n    steps:\n      - uses: actions/checkout@v4\n\n      - name: Deploy application\n        run: |\n          echo \"Deploying to production...\"\n          # Deployment commands here\n\n      - name: Notify Slack\n        if: success()\n        uses: slackapi/slack-github-action@v1\n        with:\n          webhook-url: ${{ secrets.SLACK_WEBHOOK }}\n          payload: |\n            {\n              \"text\": \"Deployment to production completed successfully!\"\n            }\n```\n\n\n## Related Skills\n\n- `gitlab-ci-patterns` - For GitLab CI workflows\n- `deployment-pipeline-design` - For pipeline architecture\n- `secrets-management` - For secrets handling","author":"@wshobson","ownerProfile":null,"authorContacts":null,"sourceUrl":"https://github.com/wshobson/agents/tree/main/plugins/cicd-automation/skills/github-actions-templates","license":"MIT","category":"coding","lang":"en","tokens":1739,"stars":0,"calls30d":1,"claimed":false,"visibility":"public","origin":"crawler","version":"0.1.0","createdAt":"2026-08-22","updatedAt":"2026-08-22","files":[],"requires":{"mcp":[],"tools":[]},"safety":{"flags":[],"scannedAt":"2026-08-22","hasScripts":false,"networkEndpoints":["app.example.com"]}}