/configure:workflows

Check and configure GitHub Actions CI/CD workflows against project standards.

Context

This command validates .github/workflows/ configuration against project standards including:

• Container build workflows – Multi-platform builds, registry push, security scanning
• Test workflows – Linting, type checking, test execution, coverage
• Release workflows – release-please automation, semantic versioning

Skills referenced: ci-workflows, github-actions-auth-security

Version Checking

CRITICAL: Before flagging outdated actions, verify latest versions:

1. GitHub Actions: Check release pages for latest versions
   • actions/checkout – releases
   • actions/setup-node – releases
   • docker/build-push-action – releases
   • docker/login-action – releases
   • docker/metadata-action – releases
   • google-github-actions/release-please-action – releases

Use WebSearch or WebFetch to verify current versions before reporting outdated actions.

Workflow

Phase 1: Detection

1. Check for .github/workflows/ directory
2. List all workflow files (*.yml, *.yaml)
3. Categorize workflows by purpose

Phase 2: Required Workflow Check

Required workflows based on project type:

Phase 3: Compliance Analysis

Container Build Workflow Checks:

Release Please Workflow Checks:

Test Workflow Checks:

Phase 4: Report Generation

GitHub Workflows Compliance Report
======================================
Project Type: frontend (detected)
Workflows Directory: .github/workflows/ (found)

Workflow Status:
  container-build.yml   ✅ PASS
  release-please.yml    ✅ PASS
  test.yml              ❌ FAIL (missing)

container-build.yml Checks:
  checkout              v4              ✅ PASS
  build-push-action     v6              ✅ PASS
  Multi-platform        amd64,arm64     ✅ PASS
  Caching               GHA cache       ✅ PASS
  Permissions           Explicit        ✅ PASS

release-please.yml Checks:
  Action version        v4              ✅ PASS
  Token                 MY_RELEASE...   ✅ PASS

Missing Workflows:
  - test.yml (recommended for frontend projects)

Overall: 1 issue found

Phase 5: Configuration (If Requested)

If --fix flag or user confirms:

1. Missing workflows: Create from standard templates
2. Outdated actions: Update version numbers
3. Missing multi-platform: Add platforms to build-push
4. Missing caching: Add GHA cache configuration

Phase 6: Standards Tracking

Update .project-standards.yaml:

components:
  workflows: "2025.1"

Standard Templates

Container Build Template

name: Build Container

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]
  release:
    types: [published]

env:
  REGISTRY: ghcr.io
  IMAGE_NAME: ${{ github.repository }}

jobs:
  build:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write

    steps:
      - uses: actions/checkout@v4

      - uses: docker/setup-buildx-action@v3

      - uses: docker/login-action@v3
        if: github.event_name != 'pull_request'
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - id: meta
        uses: docker/metadata-action@v5
        with:
          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}

      - uses: docker/build-push-action@v6
        with:
          context: .
          platforms: linux/amd64,linux/arm64
          push: ${{ github.event_name != 'pull_request' }}
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}
          cache-from: type=gha
          cache-to: type=gha,mode=max

Test Workflow Template (Node)

name: Tests

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

jobs:
  test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: actions/setup-node@v4
        with:
          node-version: '22'
          cache: 'npm'

      - run: npm ci
      - run: npm run lint
      - run: npm run typecheck
      - run: npm run test:coverage

Flags

See Also

• /configure:container – Comprehensive container infrastructure (builds, registry, scanning)
• /configure:dockerfile – Dockerfile configuration and security
• /configure:release-please – Release automation specifics
• /configure:all – Run all compliance checks
• ci-workflows skill – Workflow patterns
• github-actions-inspection skill – Workflow debugging