GitHub Actions

What it does

When your agent uses it

• Setting up secrets for CI/CD (certificate
• Creating a new release — tag-based
• Manual workflowdispatch
• Explaining the build.yml

Example prompts

• “release a new version”
• “push a tag”
• “set up CI secrets”
• “/github-actions”

Requirements

• A credential in SPARKLE_EDDSA_PRIVATE_KEY
• A credential in CODECOV_TOKEN

Workflow steps

3 steps, taken from the first numbered list in SKILL.md.

1. 1Go to Actions → Release → Run workflow
2. 2Enter version (e.g. 1.2.0 or 1.2.0-beta.1)
3. 3Optionally toggle publish_appcast and debug

What it can do on your machine

Read from SKILL.md and the folder at commit 1dcaa62. It shows what the files ask for, not the result of running them.

• Tool permissions

  Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

  From allowed-tools in the SKILL.md frontmatter.

• Runs code

  Shell commands in SKILL.md call:

  • git

  From the folder's file list and the shell code blocks in SKILL.md.

• Network

  No URLs in SKILL.md. Its commands use git, which can reach the network depending on how they are called.

  From URLs in SKILL.md, links to its own repository left out.

• Credentials

  Names these keys or tokens, usually read from environment variables:

  • APPLE_CERTIFICATE_PASSWORD
  • APP_STORE_CONNECT_KEY_ID
  • SPARKLE_EDDSA_PRIVATE_KEY
  • CODECOV_TOKEN

  From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

GitHub Actions loads about 1k tokens when it runs, and up to ~3.3k if it reads all its reference files. Until then it costs about 144 tokens; SKILL.md has 222 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it

~144

When it runs · the whole SKILL.md, loaded when a task matches

~1k

With references · SKILL.md plus every file in references/, read only if the agent opens them

~3.3k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from tddworks/ClaudeBar at commit 1dcaa62, republished under its Apache-2.0 licence (© tddworks). 222 words, ~1,039 tokens.

name

github-actions

description

Manage ClaudeBar's GitHub Actions CI/CD pipelines: build, test, and release workflows. Use this skill when: (1) Setting up secrets for CI/CD (certificate, API key, Sparkle key, Codecov) (2) Creating a new release — tag-based or manual workflow_dispatch (3) Triggering or explaining the build.yml, tests.yml, or release.yml workflows (4) Debugging release failures (signing, notarization, appcast) (5) Managing beta vs stable channels for Sparkle auto-updates (6) User says "release a new version", "push a tag", "set up CI secrets", "why did the release fail"

# 1. Update CHANGELOG.md with release notes for this version
# 2. Commit and push
git add CHANGELOG.md
git commit -m "docs: add release notes for v1.2.0"
git push origin main

# 3. Tag and push — this triggers release.yml automatically
git tag v1.2.0 && git push origin v1.2.0

# Beta / pre-release (automatically flagged on GitHub)
git tag v1.2.0-beta.1 && git push origin v1.2.0-beta.1

git tag v1.2.0
      │
      ▼
release.yml
  1. Extract + validate version (SemVer)
  2. Update Info.plist (CFBundleShortVersionString + CFBundleVersion = run_number)
  3. tuist install → tuist generate
  4. xcodebuild archive (arm64 + x86_64, unsigned)
  5. Import Developer ID cert into temp keychain
  6. codesign with entitlements
  7. notarytool submit + staple
  8. Create ZIP + DMG (signed), SHA256 checksums
  9. Extract release notes from CHANGELOG.md
 10. Publish GitHub Release (draft: false)
 11. Generate Sparkle appcast with EdDSA signature
 12. Deploy appcast to GitHub Pages

© tddworks, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 2 other files (references) in .claude/skills/github-actions of tddworks/ClaudeBar.

• SKILL.md
• references/release-workflow.md
• references/secrets-setup.md

Open the folder on GitHubat commit 1dcaa62