Shared reusable GitHub Actions workflows for rubyatscale gems.
These workflows are called from individual gem repos via uses: rubyatscale/shared-config/.github/workflows/<name>.yml@main.
| Workflow | Description |
|---|---|
CI (ci.yml) | Runs tests across Ruby 3.3–4.0, Sorbet type checking, and linting (RuboCop). Test and linter commands are configurable via inputs. |
CD (cd.yml) | Publishes the gem to RubyGems and creates a GitHub Release on successful main builds. |
Stale (stale.yml) | Marks issues and PRs as stale after 180 days of inactivity, then closes them after 7 more days. |
Triage (triage.yml) | Labels new issues with triage. |
| Workflow | Description |
|---|---|
zizmor (zizmor.yml) | Runs the zizmor security linter against all workflow files on every push and PR. |
In a gem repo, create a workflow that calls the shared workflow:
# .github/workflows/ci.ymlname: CIon:
push:
branches: [main]pull_request:
jobs:
ci:
uses: rubyatscale/shared-config/.github/workflows/ci.yml@main| Input | Default | Description |
|---|---|---|
test-command | bundle exec rspec | Command to run tests |
linter-command | bundle exec rubocop | Command to run the linter |
The CD workflow requires the following secrets in the calling repo:
GUSTO_GIT_EMAIL/GUSTO_GIT_NAME— Git identity for taggingRUBYGEMS_API_KEY— API key for publishing to RubyGemsSLACK_WEBHOOK_URL— Incoming webhook URL for failure notifications (used by both CI and CD)
- All action references are pinned to SHA hashes
- zizmor runs on every PR to lint workflows for security issues
- Dependabot is configured for monthly GitHub Actions updates