./sync.sh --bootstrap /path/to/projectThis installs four workflows, two common Git helpers, and missing project Action stubs.
project-quality: run project checksproject-build: produce one local deployable artifactproject-artifact: implementget|put, checksum storage, and the two-line noteproject-deploy: retrieve, verify checksum, deploy, and validate successproject-notify: send the lifecycle event or succeed as a no-op
Use the declared inputs and outputs in each stub.
Edit the copied workflows and map the project's existing GitHub Secrets or
Variables through env or additional Action inputs. The kit intentionally does
not define credential names.
PR quality should remain secret-free unless the project deliberately accepts that trust boundary.
ruby -e 'require "yaml"; ARGV.each { |f| YAML.load_file(f) }' \
$(find .github -type f -name '*.yml' -print)
actionlint .github/workflows/*.ymlRun the project build and a non-production deployment dry-run. Confirm Artifact
put writes ${release-id}.txt and a later get returns the same artifact and
checksum.
- create the
feature-buildlabel and restrict label management to maintainers - configure GitHub Environments
testandproduction - add production reviewers if required
- make the PR quality check required on
testandmaster
Use ./sync.sh --dry-run to review future template changes. Normal sync preserves
local edits; --force overwrites only workflows and common helpers.