GITHUB-SCRIPT KNOWLEDGE BASE

Guidance for secure actions/github-script@v8 workflow steps and reusable ESM helper modules.

STRUCTURE

github-script/
├── SKILL.md
├── references/
│   ├── security.md
│   ├── inputs-outputs-retries.md
│   ├── runtime-and-migrations.md
│   ├── external-files.md
│   └── examples.md
└── assets/
    ├── check-stubs-version-job.yml
    ├── check-uv-version-job.yml
    ├── package.json
    └── tsconfig.json

WHERE TO LOOK

LOCAL CONVENTIONS

• Pin action usage to actions/github-script@v8.
• Keep inline with.script minimal; move logic to ESM files.
• Typecheck helper modules using local assets/tsconfig.json setup.

ANTI-PATTERNS

• Never inline ${{ ... }} inside script body.
• Do not default to CommonJS (require) in new examples.
• Do not treat assets/check-*.yml as complete workflow files.