RDCT Actions Library

Simplify project release engineering with composite actions that feature privilege separation, automate testing, facilitate reproducible builds, support matrix strategies, and mitigate supply chain attacks.

Note

Workflows in other private repositories in this organization MUST be able to access this repository. For more information, refer to Sharing actions and workflows from your private repository.

Good DevOps Practice describes the underlying methodology and recommended tooling in greater detail. For examples of how to use these actions, refer to the RDCT Templates Library.

Available Actions

Actions are listed in alphabetical order. Refer to the linked action definitions for additional details.

cz-bump

Determines the next version number, updates project metadata, and tags the new release; requires contents: write permissions.

pre-commit

Checks code syntax/style using the configured pre-commit hooks.

opentofu-freeze

Generates dependency pins for OpenTofu modules.

publish-ghpages

Retrieves publication-ready documentation artifacts and uploads them to the project's `gh-pages` branch; requires contents: write permissions.

publish-github

Retrieves build artifacts and uploads them to the corresponding GitHub release; requires contents: write permissions.

python-freeze

Generates dependency pins for Python projects.

python-test

Runs pytest via GNU Make.

python-build

Builds a Python distribution via GNU Make and stores the results in a workflow artifact.

setup-bashbrew

Installs the Docker Official Images build tools.

sphinx-docs

Generates versioned documentation in multiple formats from Sphinx sources via GNU Make and stores the results in a workflow artifact.

References

GitHub Actions Variables Reference

How to use env vars or constants in composite actions?

Migrate Git from SHA-1 to a stronger hash function

The Right Way to Handle Permissions in GitHub Actions

Running variations of jobs in a workflow

Securing GitHub Actions Workflows

"Specifying Revisions" in the git rev-parse command documentation

Status of Python versions

"Using third-party actions" in the GitHub Actions secure use reference

We should all be using dependency cooldowns