💻 Coding
GitHub Actions Job Notes from Workflow Inventory (No Invented Secrets)
Write GitHub Actions job notes from a workflow inventory only. No invented secrets, tokens, or runner labels beyond the inventory.
0Reviews
Prompt
Act as a GitHub Actions workflow note-taker who only uses a pasted workflow inventory. You write job notes the inventory already supports. You do not invent secrets, tokens, or runner labels absent from Inputs. This is not a security audit opinion and not a production deploy approval. You work only from Inputs. Do not invent stats, citations, quotes, URLs, names, IDs, or records that are not in Inputs. Inputs: - Workflow inventory I lock (jobs, steps, triggers noted): [Inventory] - GitHub Actions / workflow version notes I lock: [Version] - Repository or workflow file name I may quote (or UNKNOWN): [Repo] - Runner labels I may quote (or UNKNOWN): [Runners] - Env keys I may quote without values (or UNKNOWN): [EnvKeys] - Words I must not use: [Banned] - What I must never invent (secrets, tokens, PAT values, runner IPs): [Never] - Output format: [Format] - Language: [Lang] Generate: 1. Honesty ledger: Inventory nouns, Version, Repo, Runners, EnvKeys, Lang. Forbidden: invented secrets, tokens, PAT values, runner IPs. Include GitHub Actions job terminology. 2. Job notes table: one row per Inventory job. Columns: job, steps cue, trigger note. Missing secrets write NOT IN INPUTS. 3. Runners lock: only Runners named. Unnamed self-hosted labels stay NOT IN INPUTS. 4. Version lock: print Version. Refuse Actions features newer than Version if Version is named. 5. Refuse list: inventing GITHUB_TOKEN values, inventing PAT strings, inventing AWS keys, inventing runner IP addresses. 6. Compliance pass: quote Banned and Never hits. Cut them. Format as Format. Constraints: - Notes from Inventory only. No invented secrets or tokens. - Honor Version. No emojis.
Instructions
Replace every [bracket] with your details before running. Works on ChatGPT, Claude, and Gemini.
Generated Output
This image was generated using the prompt above.
Examples
Example Input
Inventory: jobs build as pasted with checkout as pasted; test as pasted with pytest as pasted. Triggers push as pasted. Secret values NONE. Token strings NOT IN INPUTS. Version: GitHub Actions workflow_dispatch notes as pasted (do not invent reusable workflows v3 invent) Repo: harbor-ci.yml as pasted Runners: ubuntu-latest as pasted. Self-hosted UNKNOWN. EnvKeys: NODE_ENV as pasted. Secret key names UNKNOWN. Banned: guaranteed green CI, GITHUB_TOKEN invent, PAT invent, AWS key invent Never: invent secrets, invent tokens, invent PAT values, invent runner IPs Format: ledger + jobs + runners + version + refuse + compliance Lang: English
Example Output
1. Ledger. Inventory: build with checkout; test with pytest; trigger push. Secret values NONE. Tokens NOT IN INPUTS. Version GitHub Actions workflow_dispatch notes. Repo harbor-ci.yml. Runners ubuntu-latest; self-hosted UNKNOWN. EnvKeys NODE_ENV; secret key names UNKNOWN. Lang English. Forbidden: invented secrets, tokens, PAT values, runner IPs, guaranteed green CI, GITHUB_TOKEN invent, PAT invent, AWS key invent. 2. Job notes table (GitHub Actions). 1. build | step checkout as pasted | trigger push as pasted | secrets NOT IN INPUTS (NONE) 2. test | step pytest as pasted | trigger push as pasted | secrets NOT IN INPUTS Token strings: NOT IN INPUTS. 3. Runners lock. ubuntu-latest as pasted. Self-hosted UNKNOWN so write NOT IN INPUTS. Do not invent runner IPs. 4. Version lock. GitHub Actions workflow_dispatch notes as pasted. Reusable workflows v3 invent not used. 5. Refuse. GITHUB_TOKEN invent: refused. PAT invent: refused. AWS key invent: refused. Guaranteed green CI: refused. Runner IP invent: refused. 6. Compliance. Banned hits none. Format ledger+jobs+runners+version+refuse+compliance. Gaps: secret key names, self-hosted labels, matrix strategy, artifact names, concurrency group. Missing-data policy: if a field was blank, write NOT IN INPUTS rather than guessing. Lock any tool version named in Inputs; if unnamed, write unknown. No invented testimonials, star ratings, or press logos. If legal, clinical, insurance, HR, education-plan, or veterinary content appears, add a one-line not-advice and de-identify banner. Quote banned-word hits and cut them. End with a gaps list of five bullets the user still owes you. Character and byte caps in the job are hard; print counts when relevant. Refuse to backfill DOIs, exam dumps, PHI, PII, or compensation promises not in Inputs.