菜单
Use when creating, updating, or standardizing GitHub Actions workflows for a .NET repository, especially C# libraries, NuGet packages, ABP/EAF web apps, or Angular frontends.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Bootstrap a complete production-ready agent harness in a repository — CLAUDE.md, .claude/, .devin/, skills/, rules/, ignore files, and sub-agents. Use when initializing AI agent support in a new repo, restructuring existing agent files into modern File-based Context conventions, or generating harness artifacts following Agent = Model + Harness principles. Targets Claude Code and Devin CLI only — does NOT create artifacts for OpenCode, Cursor, Gemini, Copilot or JetBrains AI. Do NOT use for building MCP servers (use building-mcp-servers).
Install and configure RTK (Rust Token Killer) — a high-performance CLI proxy that reduces LLM token consumption by 60-90%. Automatically rewrites shell commands to their rtk equivalents via hooks. Use when setting up a new dev environment or when token optimization is needed. Do NOT use when raw unfiltered output is required (use rtk proxy for that).
Apply Test-Driven Development to skill authoring — write pressure scenarios with subagents (test cases), observe baseline failures (RED), write the skill (GREEN), close loopholes through refactor cycles. Use when creating new skills, editing existing skills, or verifying skills work before deployment. Do NOT use for one-off solutions, project-specific conventions (put in AGENTS.md/CLAUDE.md), or mechanical constraints enforceable via regex/validation. Companion skills: brainstorming (for design phase), create-agent-harness (for bootstrapping agent harness in a repo).
Use when working with ABP module system, dependency injection, base classes, time handling, business exceptions, or localization patterns
Use when designing and implementing RESTful APIs with ASP.NET Core, or when applying security, error handling, documentation, testing, or performance optimization to API endpoints
Use when building Blazor applications with Microsoft Fluent UI components, setting up the library, or troubleshooting FluentUI component issues
| name | dotnet-github-actions |
| description | Use when creating, updating, or standardizing GitHub Actions workflows for a .NET repository, especially C# libraries, NuGet packages, ABP/EAF web apps, or Angular frontends. |
Playbook for generating consistent CI/CD, security, quality, and publishing workflows for afonsoft .NET repositories. Patterns are distilled from metar-decoder, QRCoder.Core, and EAF.
.github/workflows to match org conventions.| Archetype | Examples | Primary artifacts | Templates to start |
|---|---|---|---|
| .NET class library / NuGet | metar-decoder, QRCoder.Core | *.sln, src/**, tests/** | ci-dotnet-library.yml, code-quality.yml, security-scan.yml, publish-nuget.yml |
| .NET web + Angular (ABP/EAF) | EAF | *.sln, Templates/Api/**, Templates/Angular/**/package.json | ci-dotnet-web-angular.yml, code-quality.yml, security-scan.yml, publish-nuget.yml, release-pipeline.yml |
| Multi-target with native deps | QRCoder.Core | SkiaSharp, libSkiaSharp.so | Add SkiaSharp native-library steps from the QRCoder.Core pattern |
| Workflow | Purpose | Trigger |
|---|---|---|
ci-dotnet-library.yml | Build, test, coverage, artifacts | push to feature/*, bug/*, hotfix/*; PR to main |
ci-dotnet-web-angular.yml | Build .NET API + Node/Angular frontend | push to develop, feature/*, release/*; PR to main/develop |
code-quality.yml | Qodana, SonarQube, Snyk, metrics | PR to main/develop, push to main/releases/* |
security-scan.yml | CodeQL, Snyk, SonarQube | push/PR to main/develop, weekly schedule |
publish-nuget.yml | Validate, pack, push to GitHub Packages + NuGet.org, GitHub Release | tags v*, release published, workflow_dispatch |
release-pipeline.yml | Production build, staging deploy, production deploy | push to main/release/*, release published |
auto-pr-dependency-update.yml | Check outdated NuGet packages and open update PRs | push to main, weekly, workflow_dispatch |
auto-pr-branch-sync.yml | Sync main into active branches | push to main, workflow_dispatch |
opencode.yml | Trigger OpenCode agent on /oc comment | issue / PR review comment |
opencode-auto-fix.yml | Trigger OpenCode on fix-me label | issue / PR labeled |
cleanup-artifacts.yml | Delete workflow artifacts older than 30 days | daily schedule |
Use these defaults unless global.json, package.json, or Directory.Build.props say otherwise.
| Tool | Version / Action |
|---|---|
| .NET SDK | 10.0.x |
| Node.js | 20 |
| Java (SonarQube) | 17 (Zulu) |
actions/checkout | v7 |
actions/setup-dotnet | v5 |
actions/setup-node | v4 |
actions/cache | v6 |
actions/upload-artifact | v7 |
actions/download-artifact | v8 |
NuGet/setup-nuget | v4 |
actions/setup-java | v5 |
github/codeql-action/* | v4 |
JetBrains/qodana-action | v2026.1.3 |
codecov/codecov-action | v7 |
peter-evans/create-pull-request | v8 |
softprops/action-gh-release | v1 |
anomalyco/opencode/github | b1fc8113948b518835c2a39ece49553cffe9b30c |
| Secret | Used in | Notes |
|---|---|---|
GITHUB_TOKEN | all workflows | auto-injected |
NUGET_TOKEN | publish-nuget | NuGet.org API key |
SNYK_TOKEN | security-scan, code-quality | optional; skip gracefully if missing |
SONAR_TOKEN | code-quality | SonarCloud token; use sonar.token or sonar.login |
QODANA_TOKEN | code-quality | JetBrains Qodana token |
CODECOV_TOKEN | ci-dotnet-library | optional; upload coverage |
OMNIROUTE_API_KEY | opencode | OpenCode agent API key |
FTP_PUBLISH_USER | release-pipeline | optional FTP deploy |
FTP_PUBLISH_PASSWORD | release-pipeline | optional FTP deploy |
FTP_PUBLISH_URL | release-pipeline | optional FTP deploy |
SLACK_WEBHOOK_URL | release-pipeline | optional deploy notification |
Before generating workflows, identify:
*.sln (e.g., MetarDecoder.sln, QRCoder.Core.sln, Eaf.sln).*.Tests.csproj.<TargetFrameworks> in csproj (e.g., netstandard2.0;net8.0;net10.0;net48).package.json and Angular/React scripts.libSkiaSharp.so.main only, or develop + main + release/*.Every template uses these env variables. Replace the placeholder values at the top of each workflow:
DOTNET_VERSION — .NET SDK version (10.0.x).SOLUTION_FILE — primary .sln path.TEST_PROJECTS — glob or paths for test csproj; leave empty to run solution tests.NODE_VERSION — Node.js version (20).ANGULAR_WORKDIR — path to Angular app (e.g., Templates/Angular/Eaf.ProjectName.UI).SONAR_PROJECT_KEY — SonarCloud project key, usually owner_repo.NUGET_SOURCE_GH — https://nuget.pkg.github.com/afonsoft/index.json.NUGET_SOURCE_NUGET — https://api.nuget.org/v3/index.json.Templates are in templates/. Copy the ones that match your archetype into .github/workflows/.
templates/ci-dotnet-library.ymltemplates/ci-dotnet-web-angular.ymltemplates/code-quality.ymltemplates/security-scan.ymltemplates/publish-nuget.ymltemplates/release-pipeline.ymltemplates/auto-pr-dependency-update.ymltemplates/auto-pr-branch-sync.ymltemplates/opencode.ymltemplates/opencode-auto-fix.ymltemplates/cleanup-artifacts.ymlWhen asked to create GitHub Actions for a .NET repo:
.github/workflows/.env placeholders with real values.SONAR_TOKEN and SNYK_TOKEN unless the repo already uses a different spelling (e.g., older QRCoder.Core workflows use SONNAR_TOKEN).permissions.${{ secrets.NAME }}.main to master unless the repo already uses master.env placeholders replaced.permissions set on CodeQL and OpenCode jobs.${{ secrets.NAME }}.continue-on-error only used for optional quality/security tools, never for build/test.if: always().AGENTS.md in this repo.