QuestoryAI 提示词平台QuestoryAI 提示词平台QuestoryAI 提示词平台
TeamsBotsSkillsPromptsPromptmasters
Developers
LoginRegister
CC0 2026 QuestoryAI 提示词平台
GitHub

GitHub Actions taste

Opinionated conventions for reliable, least-privilege GitHub Actions CI and deploy workflows. 来源:https://prompts.chat/prompts/cmw63w0p50001l007opzuvwhu

F
@import-252f10c83610ebca1a059c0b
about 1 hour agoNovember 11, 2026 at 02:00 AM
Coding•DevOpsBest PracticesAutomationCI/CD
Git

taste.md

Loading...

Comments (0)

Related Skills

SemVer Bump Advisor

Skill

Reads Conventional Commits or a changelog snippet, classifies fix/feat/breaking changes, and recommends the next SemVer bump (patch, minor, or major) with a clear rationale and a preview of the resulting version. Use when a user asks "what version should I ship?", "is this a breaking change?", or "bump SemVer from these commits". Includes a tested stdlib Python advisor. 来源:https://prompts.chat/prompts/cmv7sahy90008l306sli0i6rq

F@import-252f10c83610ebca1a059c0b
0

Git Commit Message Quality Coach

Skill

Reviews and rewrites Git commit messages to Conventional Commits quality — clear type/scope, imperative subject, useful body explaining why — and trains the author with concrete before/after feedback. 来源:https://prompts.chat/prompts/cmuxrv5vt0005oy064ytqdxxb

F@import-252f10c83610ebca1a059c0b
0

CODEOWNERS Coverage and Ownership Checker

Skill

Checks a GitHub CODEOWNERS file against the real repository file list - works out who owns every file (last matching line wins), then reports invalid or unknown owners, unowned files and critical paths left to the catch-all rule, rules that match nothing or are fully overridden by later lines, unsupported ! and [ ] syntax, duplicates, empty teams and one-person bottlenecks. Includes an offline stdlib Python checker. 来源:https://prompts.chat/prompts/cmw1spdeq0008jv0854zis7to

F@import-252f10c83610ebca1a059c0b
0

GitHub Actions Workflow Security Reviewer

Skill

Reviews GitHub Actions workflow YAML for supply-chain and injection risks: pull_request_target with PR checkout, untrusted github.event text in run steps, actions pinned to tags or branches instead of commit SHAs, missing or write-all permissions, secrets in shell commands, curl | bash, self-hosted runners on PRs, and missing timeouts. Use before merging CI changes or auditing a repo. Includes a stdlib Python linter with --self-test. 来源:https://prompts.chat/prompts/cmvgd40ij0001jp08nxmtiwef

F@import-252f10c83610ebca1a059c0b
0