configure-reusable-workflows

Reusable GitHub Actions workflows for security, quality, accessibility. Use when adding OWASP/secret/code-smell scans or WCAG checks to PR pipelines.

Jump to install

Repository: laurigates/claude-plugins
Last source activity: June 18, 2026 at 06:18
Detected SKILL.md language: English
Stars: 49
Forks: 7

Install options

The review-first prompt is selected by default. You can switch to a direct command or download a local copy.

Review the source files

Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.

Back to search Back to installation

created	"2026-02-02T00:00:00.000Z"
modified	"2026-06-18T00:00:00.000Z"
reviewed	"2026-04-29T00:00:00.000Z"
description	Reusable GitHub Actions workflows for security, quality, accessibility. Use when adding OWASP/secret/code-smell scans or WCAG checks to PR pipelines.
allowed-tools	Glob, Grep, Read, Write, Edit, Bash(mkdir ), Bash(ls ), AskUserQuestion, TodoWrite
args	[--all] [--security] [--quality] [--a11y] [--list]
argument-hint	[--all] [--security] [--quality] [--a11y] [--list]
name	configure-reusable-workflows

/configure:reusable-workflows

Install Claude-powered reusable GitHub Actions workflows from claude-plugins into a project.

When to Use This Skill

Use this skill when...	Use another approach when...
Adding Claude-powered reusable workflows for security, quality, or accessibility	Setting up standard CI/CD workflows (use `/configure:workflows`)
Installing pre-built workflow callers from claude-plugins	Writing custom GitHub Actions workflows from scratch
Automating OWASP, secret scanning, or code smell detection via CI	Configuring local security scanning tools (use `/configure:security`)
Adding WCAG accessibility checks to pull request pipelines	Running one-off accessibility audits manually
Bootstrapping a full suite of Claude-powered CI checks across categories	Only need to check existing workflow compliance

Context

Workflows dir: !find . -maxdepth 1 -type d -name \'.github/workflows\'
Existing callers: !find . -path '*/.github/workflows/*' -maxdepth 3 -name 'claude-*'
Package files: !find . -maxdepth 1 \( -name 'package.json' -o -name 'pyproject.toml' -o -name 'Cargo.toml' -o -name 'go.mod' \) -print -quit
TypeScript files: !find . -maxdepth 2 \( -name '*.ts' -o -name '*.tsx' \) -print -quit
Component files: !find . -maxdepth 3 \( -name '*.jsx' -o -name '*.vue' -o -name '*.svelte' \) -print -quit

Parameters

Parse from command arguments:

--all: Install all workflows
--security: Install security workflows only
--quality: Install quality workflows only
--a11y: Install accessibility workflows only
--list: List available workflows without installing

Available Workflows

Security

Workflow	Description	File
secrets	Detect leaked secrets and credentials	`reusable-security-secrets.yml`

Workflow	Description	File
typescript	TypeScript strictness analysis	`reusable-quality-typescript.yml`
code-smell	Code smell detection	`reusable-quality-code-smell.yml`
async	Async/await pattern issues	`reusable-quality-async.yml`

Available workflow categories:
  [1] Security (secrets, owasp, deps)
  [2] Quality (typescript, code-smell, async)
  [3] Accessibility (wcag, aria)
  [4] All workflows

Which categories? (comma-separated, e.g., 1,2):

name: "Claude: <Action> <target>"

on:
  pull_request:
    branches: [main]
  workflow_dispatch:

permissions:
  contents: read
  pull-requests: write
  id-token: write

jobs:
  check:
    uses: laurigates/.github/.github/workflows/reusable-<category>-<name>.yml@main
    with:
      # Default inputs - customize as needed
      max-turns: 5
    secrets: inherit

Required secret: CLAUDE_CODE_OAUTH_TOKEN

To configure:
1. Go to repository Settings > Secrets and variables > Actions
2. Add secret: CLAUDE_CODE_OAUTH_TOKEN
3. Value: Your Claude Code OAuth token

Get token from: https://console.anthropic.com/

Input	Purpose	Example
`file-patterns`	Files to scan	`'src/*/.ts'`
`max-turns`	Claude analysis depth	`3` (quick) to `10` (thorough)
`fail-on-*`	Block merges on findings	`true` / `false`
`wcag-level`	Accessibility standard	`'A'`, `'AA'`, `'AAA'`

Context	Command
List available workflows	`/configure:reusable-workflows --list`
Install all workflows at once	`/configure:reusable-workflows --all`
Security workflows only	`/configure:reusable-workflows --security`
Quality workflows only	`/configure:reusable-workflows --quality`
Accessibility workflows only	`/configure:reusable-workflows --a11y`
Check existing callers	`find .github/workflows -name 'claude-*' -type f`

Flag	Description
`--all`	Install all workflows
`--security`	Install security workflows only
`--quality`	Install quality workflows only
`--a11y`	Install accessibility workflows only
`--list`	List available workflows without installing