GitHub¶

# GitHub CLI (gh) - essential for automation
gh auth login                          # Authenticate
gh repo create myrepo --public         # Create repository
gh repo clone owner/repo               # Clone repository

# Pull requests
gh pr create --title "Fix bug" --body "Description"  # (1)!
gh pr list                             # List PRs
gh pr view 123                         # View PR details
gh pr checkout 123                     # Checkout PR locally
gh pr merge 123 --squash               # Merge with squash

# Issues
gh issue create --title "Bug report"
gh issue list --label bug
gh issue close 456

# GitHub Actions workflows
gh workflow list                       # List workflows
gh workflow view deploy.yml            # View workflow
gh run list                            # List workflow runs
gh run view 789                        # View run details
gh run watch                           # Watch current run

# Releases
gh release create v1.0.0 --title "Release 1.0.0" \
  --notes "Release notes" ./binary     # (2)!
gh release list
gh release download v1.0.0

# Repository management
gh repo view owner/repo                # View repo info
gh repo fork owner/repo                # Fork repository
gh repo sync                           # Sync fork with upstream

# Secrets management
gh secret set API_KEY < api-key.txt    # (3)!
gh secret list
gh secret delete API_KEY

# Gists
gh gist create script.sh --public
gh gist list

# GitHub Actions workflow (.github/workflows/ci.yml)
name: CI Pipeline

on:
  push:
    branches: [main, develop]
  pull_request:
    branches: [main]

jobs:
  test:
    runs-on: ubuntu-latest  # (1)!

    steps:
      - uses: actions/checkout@v4

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '20'
          cache: 'npm'  # (2)!

      - name: Install dependencies
        run: npm ci  # (3)!

      - name: Run tests
        run: npm test

      - name: Upload coverage
        uses: codecov/codecov-action@v4
        with:
          token: ${{ secrets.CODECOV_TOKEN }}  # (4)!

  build:
    needs: test  # (5)!
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v4

      - name: Build Docker image
        run: docker build -t myapp:${{ github.sha }} .

      - name: Push to registry
        run: |
          echo ${{ secrets.DOCKER_PASSWORD }} | docker login -u ${{ secrets.DOCKER_USERNAME }} --password-stdin
          docker push myapp:${{ github.sha }}

# Dependabot config (.github/dependabot.yml)
version: 2
updates:
  - package-ecosystem: "npm"
    directory: "/"
    schedule:
      interval: "weekly"  # (1)!
      day: "monday"
      time: "09:00"
    open-pull-requests-limit: 5  # (2)!
    reviewers:
      - "team-lead"
    labels:
      - "dependencies"
    commit-message:
      prefix: "chore"  # (3)!

  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "monthly"

# Reusable workflow (.github/workflows/deploy.yml)
name: Deploy

on:
  workflow_call:  # (1)!
    inputs:
      environment:
        required: true
        type: string
    secrets:
      api_key:
        required: true

jobs:
  deploy:
    runs-on: ubuntu-latest
    environment: ${{ inputs.environment }}  # (2)!

    steps:
      - uses: actions/checkout@v4

      - name: Deploy to ${{ inputs.environment }}
        run: ./deploy.sh
        env:
          API_KEY: ${{ secrets.api_key }}