원클릭으로
github-actions
GH Actions rules for Fawkes — pin SHA, timeout-minutes, path filtering. Load when editing workflows.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
메뉴
GH Actions rules for Fawkes — pin SHA, timeout-minutes, path filtering. Load when editing workflows.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Architecture Decision Record template and quality checklist with DORA capability linkage. Use when documenting an architectural decision that agents must follow going forward.
Step-by-step OpenTelemetry and uFawkesObs setup: SDK init patterns for TypeScript, Python, Go; DORA metric spans; Grafana dashboard spec. Use when adding observability to a service.
Step-by-step guide to connect a uFawkesAI project to uFawkesPipe and fawkes platform: Dockerfile, ArgoCD manifest, DORA deployment spans. Use when setting up CI/CD for a new service.
Pre-merge security checklist covering secrets, dependencies, auth, data handling, and fawkes suite gates. Use when reviewing a PR for security issues or hardening a change before merge.
TDD patterns and language-specific test examples for TypeScript/Jest, Python/pytest, and Go. Use when writing tests, increasing coverage, or implementing test-driven development.
Add DORA metrics instrumentation to GitHub Actions workflows — job timestamps, deployment tracking, lead time calculation. Load when adding DORA logging to workflows.
| name | github-actions |
| description | GH Actions rules for Fawkes — pin SHA, timeout-minutes, path filtering. Load when editing workflows. |
| license | MIT |
| compatibility | opencode |
Rules:
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683timeout-minutes on every job${{ secrets.NAME }} only — never hardcoded secretspermissions per jobpaths-ignore for docs-only PRsTemplate:
jobs:
job-name:
runs-on: ubuntu-latest
timeout-minutes: 15
permissions:
contents: read
steps:
- uses: actions/checkout@SHA
DORA timestamps:
- run: echo "job-start:$(date -u +%Y-%m-%dT%H:%M:%SZ)"
- if: always() run: echo "job-finish:$(date -u +%Y-%m-%dT%H:%M:%SZ)"
Validate:
python -c "import yaml; yaml.safe_load(open('FILE'))"
grep "uses:" FILE | grep -v "@[a-f0-9]\{40\}" # find unpinned