emrecavunt/github-repokit
Per-repository GitHub governance as Terragrunt, plus optional AWS OIDC and GCP WIF. Apply is human-gated. Does not write workflow YAML or manage the GitHub organization.
Add or complete GitHub Actions environments and environment-scoped Actions variables with GitHub RepoKit (bootstrap/github/actions). Use when the user asks for GitHub environments, protected production environments, or Actions variables as Terragrunt — even if they do not say "repokit". Does not write workflow YAML. Does not require AWS or GCP and must not add a Terragrunt dependency on identity. Ask before wiring AWS_ROLE_ARN or GCP WIF variables.
Add optional AWS IAM OIDC for GitHub Actions with GitHub RepoKit (bootstrap/aws/identity, modules/github-aws-oidc). Use when the user asks for AWS OIDC, an AWS_ROLE_ARN for Actions, or keyless AWS access from GitHub — even if they do not say "repokit". Do not run this skill unless the human asked for AWS. Does not write workflow YAML. After a human applies identity, pass role_arn into the actions stack as an environment variable; never a Terragrunt dependency.
Add optional GCP Workload Identity Federation for GitHub Actions with GitHub RepoKit (bootstrap/gcp/identity, modules/github-wif-oidc). Use when the user asks for WIF, workload identity, GCP_WORKLOAD_IDENTITY_PROVIDER, or keyless GCP from GitHub — even if they do not say "repokit". Do not run this skill unless the human asked for GCP. Does not write workflow YAML. After a human applies identity, pass outputs into the actions stack as environment variables; never a Terragrunt dependency.
Add or complete per-repo GitHub governance with GitHub RepoKit (bootstrap/github/repository via Terragrunt): settings, teams, branch protection, CODEOWNERS. Use when the user asks to bootstrap a GitHub repository, add CODEOWNERS, branch protection, team access, or repository settings as code — even if they do not say "repokit". Does not write workflow YAML, does not manage the GitHub organization, and does not create Actions environments (that is github-repokit-actions).