GitHub Actions
Workflow Catalog
A centralized repository of proven CI/CD patterns, security scans, and automation workflows. Copy, paste, and ship faster.
category Categories
Pin Your Actions
Always reference actions by commit SHA instead of tags (e.g. @v1) to prevent supply chain attacks from mutable refs.
Node.js CI Matrix
CI • TestingWhy use this?
Standardized parallel testing across multiple Node.js versions (16, 18, 20) and OS environments. Includes caching for npm modules to speed up builds.
name: Node CIon: [push]jobs:build:runs-on: ubuntu-lateststrategy:matrix:node: [16, 18, 20]steps:# Check out code- uses: actions/checkout@v4- uses: actions/setup-node@v4rss_feed Latest Updates
View Allactions/checkout v4.1.2
2h agoPerformance improvements for sparse checkouts.
docker/build-push v5.3
1d agoAdded provenance generation support.
aws-actions/configure v4
2d agoNode 20 runtime update.
Trivy Container Scan
Vulnerability scanning for container images before pushing to registry.
uses: aquasecurity/trivy-action@0.16.1with:image-ref: 'my-app:${{ github.sha }}'Auto Semantic Release
Automated versioning and changelog generation based on conventional commits.
uses: cycjimmy/semantic-release-action@v4env:GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}Stale Issue Closer
Automatically identify and close stale issues and PRs to keep backlog clean.
uses: actions/stale@v9with:days-before-stale: 30Need a full architecture?
Check out the Architecture Blueprints for complete reference implementations combining Terraform, Kubernetes manifests, and these GitHub Actions.