gh-actions-for-devops

Reusable GitHub Actions workflows for CI/CD, security, infrastructure, and developer automation.

Usage

Call a reusable workflow from a job in your repository:

name: YAML lint
on:
  pull_request:

jobs:
  lint:
    uses: dceoy/gh-actions-for-devops/.github/workflows/yaml-lint.yml@main

For production use, replace @main with a release tag or commit SHA. Pass sensitive values through secrets:, never with:. Cache-enabled workflows document options such as enable-cache, cache-dependency-path, and cache-salt in their workflow files.

Reusable Workflows

Each workflow below exposes workflow_call; see its file for supported inputs, secrets, permissions, and defaults.

Workflow File	Description
aws-cloudformation-lint.yml	Lint for AWS CloudFormation
aws-codebuild-run.yml	Build using an AWS CodeBuild project
aws-parameter-store-update.yml	Update AWS Parameter Store values
bats-test.yml	Test for Bats
claude-code-bot.yml	Mention bot using Claude Code
claude-code-review.yml	Pull request review using Claude Code
dependabot-auto-merge.yml	Dependabot auto-merge
docker-build-and-push.yml	Docker image build and push
docker-build-with-multi-targets.yml	Docker image build and save for multiple build targets
docker-buildx-bake.yml	Docker image build from a bake definition file
docker-image-scan.yml	Security scan for Docker images
docker-lint-and-scan.yml	Lint and security scan for Dockerfile
docker-pull-from-aws.yml	Docker image pull from AWS
docker-save-and-terraform-deploy-to-aws.yml	Docker image save and resource deployment to AWS using Terraform
gcloud-infra-manager-deployments.yml	Deployment of Google Cloud resources using Infrastructure Manager
gemini-cli-to-slack.yml	Gemini CLI with Slack notification
github-actions-lint-and-scan.yml	Lint and security scan for GitHub Actions workflows and actions
github-codeql-analysis.yml	GitHub CodeQL Analysis
github-major-version-tag.yml	Major version tag on GitHub
github-pr-branch-aggregation.yml	Aggregation of open pull request branches
github-release.yml	Release on GitHub
go-package-lint-and-scan.yml	Lint and security scan for Go
html-lint-and-scan.yml	Lint and scan for HTML/CSS
hugo-deploy-to-gh-pages.yml	Build and deployment of Hugo site to GitHub Pages
json-lint.yml	Lint for JSON
json-schema-validation.yml	Schema validation for JSON
markdown-format-and-pr.yml	Formatting for Markdown
microsoft-defender-for-devops.yml	Microsoft Defender for Devops
opencode-bot.yml	Mention bot using OpenCode
opencode-review.yml	Pull request review using OpenCode
pr-agent.yml	PR-agent
python-package-format-and-pr.yml	Formatting for Python
python-package-lint-and-scan.yml	Lint and security scan for Python
python-package-mkdocs-gh-deploy.yml	Build and deployment of MkDocs documentation
python-package-release-on-pypi-and-github.yml	Python package release on PyPI and GitHub
python-package-test.yml	Test for Python Package
python-pyinstaller.yml	Build using PyInstaller
r-package-format-and-pr.yml	Formatting for R
r-package-lint.yml	Lint for R
shell-lint.yml	Lint for Shell
speckit-init.yml	Spec Kit initialization
terraform-deploy-to-aws.yml	Deployment of AWS resources using Terraform
terraform-format-and-pr.yml	Formatting for Terraform
terraform-lint-and-scan.yml	Lint and security scan for Terraform
terraform-lock-files-upgrade-and-pr-merge.yml	Upgrade of Terraform lock files and pull request merge
terraform-lock-files-upgrade.yml	Upgrade of Terraform lock files
terragrunt-aws-switch-resources.yml	Switcher to apply or destroy AWS resources using Terragrunt
toml-lint.yml	Lint for TOML
typescript-package-format-and-pr.yml	Formatting for TypeScript
typescript-package-lint-and-scan.yml	Lint and security scan for TypeScript
typescript-package-script.yml	Package script run for a TypeScript project
web-api-monitoring-with-slack.yml	Synthetic web API monitoring with Slack notification
yaml-lint.yml	Lint for YAML

License

MIT License

Copyright (c) 2024 Daichi Narushima