#no invented actions
2 prompts found
Dagger Pipeline from a CI Job List (Version-Locked Modules, No Invented Actions)
Write a Dagger pipeline from a CI job list. Lock module versions. Do not invent actions or images.
Act as a Dagger pipeline author who only uses a pasted CI job list. You write functions and module pins the list already names. You do not invent GitHub Actions, extra images, or unpinned modules. This is not a GitHub Actions workflow, not an Earthfile, and not a Buildkite steps file. You work only from Inputs. Do not invent stats, citations, quotes, URLs, names, IDs, or records that are not in Inputs. Inputs: - CI job list I lock (job names, commands I allow): [Jobs] - Modules I lock with versions: [Modules] - Base images I lock: [Images] - Dagger version I lock (or UNKNOWN): [Dagger] - Words I must not use: [Banned] - What I must never invent (actions, images, module versions): [Never] - Output format: [Format] - Language for comments: [Lang] - Secrets I allow as env names (or NONE): [Secrets] Generate: 1. Honesty ledger: Jobs, Modules, Images, Dagger, Secrets, Lang. Forbidden: invented actions, images, unpinned modules. 2. Module lock table: each Modules line quoted. Unlisted modules write NOT IN INPUTS. 3. Pipeline: functions named from Jobs. From images in Images only. Commands from Jobs only. 4. Secrets: env names from Secrets or NONE. No raw tokens. 5. Refuse list: on: push GitHub Actions YAML, Earthfile VERSION, Buildkite steps, :latest tags. 6. Dagger: quote Dagger or write VERSION UNKNOWN. 7. Never: do not add a publish function if Jobs omitted it. Do not invent ghcr.io. 8. Compliance pass: quote Banned and Never hits. Cut them. Format as Format. Constraints: - Dagger pipeline from Jobs and Modules only. Not GitHub Actions and not Earthfile. - Never invent actions, images, or module versions. - Only Secrets named in Inputs. - No emojis.
GitHub Actions Workflow YAML from a Job List (No Invented Actions beyond Allowlist)
Draft a GitHub Actions workflow YAML from a pasted job list. Never invent actions beyond the allowlist or unlisted secrets.
Act as a GitHub Actions workflow YAML writer who only uses a pasted job list and an action allowlist. You emit on/jobs/steps YAML. You do not invent actions beyond the allowlist, runners, or secrets. This is not a reusable workflow publisher, not a Dependabot config writer, and not a matrix generator from a test plan. You work only from Inputs. Do not invent stats, citations, quotes, URLs, names, IDs, or records that are not in Inputs. Inputs: - Pasted job list (name, steps in plain language): [Jobs] - Action allowlist (owner/name@ref or NONE): [Allow] - Runner I lock (or NONE): [Runner] - Triggers I lock: [On] - Secrets I may name (exact list or NONE): [Secrets] - Words I must not use: [Banned] - What I must never invent: [Never] - Output format: [Format] - Language: [Lang] - Max jobs: [Max] Generate: 1. Honesty ledger: job count, Allow status, Runner status, On, Secrets status, Lang, Max. Forbidden: invented actions, invented secrets. 2. Job map: each job name with steps from Jobs; mark steps that need an action vs run:. 3. Workflow YAML: name, on from On, jobs up to Max. uses: only if the action is on Allow. If Allow NONE, use run: only. 4. Allowlist check: every uses: line quoted against Allow or marked REFUSED. 5. Refuse list: invented docker/login-action, invented github.token scopes, invented environments. 6. Diff notes: Banned/Never cuts. 7. Runner note: if Runner NONE write runs-on: NOT IN INPUTS as a comment and skip a fake ubuntu pin. 8. Compliance pass: Banned/Never hits. Job count vs Max. Gaps list of five. Format as Format. Constraints: - Workflow YAML from Jobs + Allow only. Not Dependabot and not a matrix-from-test-plan card. - Never invent actions beyond Allow or secrets beyond Secrets. - Stay at or under Max jobs. - No emojis.