📦

Ansible Collections

Build, lint, and publish Ansible collections straight to Galaxy — with ansible-lint, flake8, and black checks included out of the box.

🐳

Container Images

Full container lifecycle: build multi-platform images, scan them with Trivy, sign with cosign, and push to GitHub Packages — with SBOM attestations.

🐍

Python (Poetry)

Test Python projects across multiple versions with pytest and Poetry, then publish releases to PyPI and deploy MkDocs documentation.

🔍

Pre-Commit

Run pre-commit hooks on every pull request, with black, isort, and flake8 pre-installed and extensible via a simple requirements input.

📖

MkDocs

Build and deploy MkDocs documentation sites to GitHub Pages on every push to main.

🔒

Least-Privilege by Default

Every workflow declares the minimum permissions it needs. GitHub Actions enforces the intersection so your repos are hardened without any extra effort.