tomgrv/actions

Reusable GitHub Actions

Overview

tomgrv/actions is a suite of modular, reusable GitHub composite actions designed to automate code quality, PR management, and package maintenance for monorepos and composer-based projects. Each action is self-contained, follows strict output/logging conventions, and is documented for easy integration into your workflows.

Each action is also available as a standalone CLI via the root npm package @tomgrv/actions. Use dispatch.sh to run any action locally with sensible defaults:

npx @tomgrv/actions <action> [args...]

For example:

# Run composer validation locally
GITHUB_TOKEN=ghp_xxx npx @tomgrv/actions check-composer

# List monorepo packages
npx @tomgrv/actions list-packages

# Detect uncommitted changes
npx @tomgrv/actions detect-changes

Run without arguments to see all available actions:

npx @tomgrv/actions

Available Actions

Badge legend: Stable   Beta   Experimental

🔧 Utils

• config-bot : Configure git bot identity and authentication for CI/CD.
• setup-php : Setup PHP, Composer, and extensions as per composer for CI jobs.
• setup-node : Setup Node.js and npm for CI jobs.

📦 Monorepo

• list-packages : List all composer/npm packages in a monorepo.
• degit-package : Import the latest source branch content into a package repository and prune unwanted folders.
• split-package : Split a monorepo package to a separate repository based on path.

🐘 PHP Check

• run-phpinsights : Run PHP Insights via reviewdog for inline code review feedback.
• run-filacheck : Run FilaCheck via reviewdog for inline Filament code review feedback.
• run-phpstan : Run PHPStan via reviewdog for inline code review feedback.
• run-phpmd : Run PHP Mess Detector and report via reviewdog.
• run-pint : Run Laravel Pint code style fixer and report via reviewdog.
• run-phptests : Run the PHP test suite.
• check-composer : Validate composer.json and composer.lock consistency.
• check-security-composer : Audit Composer dependencies for known vulnerabilities.

🔀 Pull Request

• create-pr : Open or update a pull request for a branch, with customizable title/body/labels.
• rebase-pr : Rebase the head branch of a pull request onto its base branch.
• check-pr-format : Validate PR title and body format.
• check-secret : Scan pull request changes for leaked secrets.
• check-security-npm : Audit npm dependencies for known vulnerabilities.

🏷️ Repository Management

• update-labels : Create or update repository labels from a JSON file or comma-separated list.
• detect-changes : Detect uncommitted or untracked changes in a given path.

See each action's README for usage, inputs, and outputs.

License

MIT License. See individual action folders for details.