This repository contains reusable GitHub Actions used by deCort.tech projects and the design decisions that define their trust boundaries.
No shared automation has been published.
Add a component after at least two projects implement the same responsibility and the common interface is clear. The first project to adopt a component acts as its validation consumer before another project changes to it.
This repository can contain:
- Reusable workflows for complete shared jobs.
- Composite actions for repeated step sequences.
- Tests and usage documentation for those components.
- Design decisions that affect shared automation.
Keep the following material in each project repository:
- Event triggers, permissions, concurrency settings, and environments.
- Build scripts, Make targets, and policy configuration.
- Release metadata and project-specific publication workflows.
- Compatibility and support commitments.
The public decort-tech/.github
repository provides organization profile content and default community health
files. It does not provide engineering automation.
Project workflows pin shared components by a full commit SHA. They retain their own permission budget and map required secrets explicitly.
See Shared automation design for the complete boundary and extraction requirements.
This repository is licensed under the Apache License 2.0.