andes-software-solutions/andes-github

Use when auditing or writing GitHub Actions workflows for CI minutes and cost: caching, concurrency, trigger scoping, job and matrix structure, and runner choice.

Use when writing, reviewing, or hardening GitHub Actions workflows (.github/workflows/*.yml): script injection, pull_request_target/workflow_run escalation, SHA pinning, least-privilege GITHUB_TOKEN, secret exposure, OIDC, and self-hosted runners.

Use when upgrading GitHub Actions to supported runtimes (Node deprecations, runner images): pick safe action versions, preserve workflow behavior, and validate after the upgrade.