Skip to content

Documentation#

ci-helpers

$ cat .github/workflows/ci.yml
jobs:
  ci:
    uses: nikolareljin/ci-helpers/.github/workflows/node.yml@production
    with:
      node_version: "22"
$ git push
lint · test · build · docker · e2e · scan      all green, no CI written

This directory contains detailed guidance for using and extending the reusable workflows and composite actions in this repository.

Consumers pin workflows via the floating @production tag; see the repository Releases for the current version (tracked in VERSION).

Start here:

  • Reusable workflows — CI, PR gate, deploy, scan, release, Tauri, WinGet, Docker multi-arch, manifest versioning, and release-rc-pr.
  • Packaging and signing: DEB on a release, Launchpad PPA, macOS; one set of secret names.
  • Windows signing: certificates for pfx and Azure Artifact Signing, making the PFX, timestamping, turning pfx on.
  • Presets - stack-specific presets (Shell/Node/React/Python/PHP/Pimcore/Laravel/Django/WordPress/Go/Java/Gradle/Kotlin/Rust/C#/Godot/Unity/Docker/pnpm/Pages/Playwright/Cypress/Cloudflare).
  • Composite actions - semver compare, release tag guard, scan helpers, Pimcore and WordPress checks, macOS signing, Windows signing.
  • Examples — common usage patterns (monorepos, E2E servers, Docker + E2E).
  • About — the rest of this author's public work.
  • Usage guide — consuming workflows and actions from other repos, plus automation for the production tag and branch.
  • Local release safety hook: configure git config core.hooksPath .githooks to enable the tracked pre-commit guard that verifies VERSION matches release/[v]X.Y.Z[-rcN] or release/[v]X.Y.Z[-rc.N].
  • Release RC PR workflow — auto-opening PRs from release candidate branches; also a reusable workflow_call workflow for caller repos.
  • Apple App Store publishing — Fastlane + GitHub Actions guidance.
  • Google Play publishing — Fastlane + GitHub Actions guidance.
  • Security best practices — CI secret handling.