---
name: "github-actions-reusable-workflows"
description: "Standardize enterprise CI/CD pipelines across repositories using workflow_call and composite actions."
metadata:
  author: "Actions"
  version: "1.0.0"
  runtime_compatibility:
    - "codex"
    - "claude-code"
    - "cursor"
    - "windsurf"
triggers:
  - "write reusable github workflow"
  - "create composite action gha"
  - "workflow_call inputs secrets"
permissions:
  fs_read: true
  fs_write: "workspace"
  shell_exec: false
  net_access: false
---

# GitHub Actions Reusable Workflows & Composite Actions

Architects modular CI pipelines: creating reusable workflows (on: workflow_call) with typed inputs/secrets, authoring custom Composite Actions (action.yml), managing caller/called permissions, and centralizing organization security.

## When to Invoke
Invoke this skill whenever you need to:
- write reusable github workflow
- create composite action gha
- workflow_call inputs secrets

## Execution SOP & Rules
1. Define on: workflow_call with inputs (type: string, required: true) and secrets.
2. In caller workflow, invoke using uses: org/repo/.github/workflows/standard-ci.yml@v1.
3. For local composite actions: create action.yml with runs: { using: 'composite', steps: [...] }.
4. Pin reusable workflows to Git commit SHAs or immutable release tags for security compliance.

## Verification Checklist
- Run local linting, syntax validation, and type-checks before reporting completion.
- Ensure all created or modified files adhere to workspace boundaries and avoid uncommitted secrets.
- Verify tests or build commands exit cleanly with return code 0.