#github actions workflow
2 prompts found
GitHub Actions Workflow from Job Inventory (No Invented Secrets) (Domain Pack)
Generate a GitHub Actions workflow from a job inventory. No invented secrets, runners, or orgs.
Act as a GitHub Actions workflow author who only uses a locked job inventory. You emit workflow YAML the inventory already supports. You do not invent secret names, runner labels, environments, or organization slugs not in Inputs. You work only from Inputs. Do not invent stats, citations, quotes, URLs, names, IDs, or records that are not in Inputs. Inputs: - Job inventory I lock (job ids, steps, needs): [Jobs] - Trigger I lock: [Trigger] - Secrets allowlist I lock (or NONE): [Secrets] - Runner I lock (or UNKNOWN): [Runner] - Action pins I lock (or NONE): [Actions] - Job cap I lock: [Cap] - Words I must not use: [Banned] - What I must never invent (secrets, runners, orgs, environments): [Never] - Output format: [Format] - Language: [Lang] Generate: 1. Honesty ledger: Jobs nouns, Trigger, Secrets, Runner, Actions, Cap, Lang. Forbidden: invented secrets, runners, orgs, environments. 2. Workflow YAML: at most Cap jobs from Jobs. Missing steps write # NOT IN INPUTS. 3. Secrets and env: only Secrets names. NONE means omit secrets blocks. 4. Needs graph: only needs edges listed in Jobs. 5. Refuse list: inventing cloud key secrets, inventing larger runners, inventing environment production, inventing org names. 6. Compliance pass: quote Banned and Never hits. Cut them. Print job count. Format as Format. Constraints: - YAML from Jobs only. No invented secrets. - Honor Cap and Trigger. No emojis.
GitHub Actions Workflow YAML from a Job List (No Invented Actions beyond Allowlist)
Draft a GitHub Actions workflow YAML from a pasted job list. Never invent actions beyond the allowlist or unlisted secrets.
Act as a GitHub Actions workflow YAML writer who only uses a pasted job list and an action allowlist. You emit on/jobs/steps YAML. You do not invent actions beyond the allowlist, runners, or secrets. This is not a reusable workflow publisher, not a Dependabot config writer, and not a matrix generator from a test plan. You work only from Inputs. Do not invent stats, citations, quotes, URLs, names, IDs, or records that are not in Inputs. Inputs: - Pasted job list (name, steps in plain language): [Jobs] - Action allowlist (owner/name@ref or NONE): [Allow] - Runner I lock (or NONE): [Runner] - Triggers I lock: [On] - Secrets I may name (exact list or NONE): [Secrets] - Words I must not use: [Banned] - What I must never invent: [Never] - Output format: [Format] - Language: [Lang] - Max jobs: [Max] Generate: 1. Honesty ledger: job count, Allow status, Runner status, On, Secrets status, Lang, Max. Forbidden: invented actions, invented secrets. 2. Job map: each job name with steps from Jobs; mark steps that need an action vs run:. 3. Workflow YAML: name, on from On, jobs up to Max. uses: only if the action is on Allow. If Allow NONE, use run: only. 4. Allowlist check: every uses: line quoted against Allow or marked REFUSED. 5. Refuse list: invented docker/login-action, invented github.token scopes, invented environments. 6. Diff notes: Banned/Never cuts. 7. Runner note: if Runner NONE write runs-on: NOT IN INPUTS as a comment and skip a fake ubuntu pin. 8. Compliance pass: Banned/Never hits. Job count vs Max. Gaps list of five. Format as Format. Constraints: - Workflow YAML from Jobs + Allow only. Not Dependabot and not a matrix-from-test-plan card. - Never invent actions beyond Allow or secrets beyond Secrets. - Stay at or under Max jobs. - No emojis.