Skip to content

AGENTS.md

Latest commit

 

History

History
21 lines (18 loc) · 1.08 KB

AGENTS.md

File metadata and controls

21 lines (18 loc) · 1.08 KB
Raw

Agent Instructions

This repo contains reusable GitHub composite actions for the Async organization. Keep each action small, explicit, and callable from generated workflows.

Rules

  • Do not add secrets to examples, logs, fixtures, or README snippets.
  • Prefer Node.js ESM helper scripts under scripts/; keep package.json with "type": "module".
  • Keep action behavior step-level. Workflow triggers, job matrices, permissions, environments, concurrency, and secret mapping belong to the caller workflow, normally generated by @async/pipeline.
  • Publishing and release behavior should use standard CLIs (npm and gh). Do not add a bundled GitHub API client unless a CLI cannot express the job.
  • Composite actions must expose all privileged inputs explicitly. Do not infer write access or token names.
  • Executable changes are owner-only: external reports may come through issues or advisories, but maintainers write action metadata, helper scripts, and package metadata before @async/pipeline pins a reviewed commit SHA.
  • When editing action metadata, run npm run check.