Update GitHub Actions templates list

[Sazwanismail]

User description

Added a comprehensive list of GitHub Actions templates organized by category, including Pages, Automation, CI, Deployment, and Security. This update consolidates previously captured screenshots and provides additional templates for better reference. Berikut adalah senarai penuh dan komprehensif templat GitHub Actions yang telah dikemas kini. Senarai ini menggabungkan kesemua 20+ tangkapan skrin yang anda berikan, disatukan tanpa pertindihan, dan dilengkapkan dengan templat standard GitHub Actions yang lain untuk rujukan yang lebih lengkap.

Saya telah susun mengikut kategori asal dalam GitHub Actions (Pages, Automation, Continuous Integration, Deployment, dan Security).

📄 Pages (Halaman)

| Nama Tindakan | Penerbit | Penerangan | Tag / Bahasa | | :--- | :--- | :--- | :--- |
| Static HTML | GitHub Actions | Deploy static files in a repository without a build. | HTML | | Jekyll | GitHub Actions | Package a Jekyll site. | - | | Hugo | GitHub Actions | Package a Hugo site. | - | | Next.js | GitHub Actions | Package a Next.js site. | - | | NuxtJS | GitHub Actions | Package a NuxtJS site. | - | | Astro | GitHub Actions | Deploy an Astro site. | Astro | | Gatsby | GitHub Actions | Build and deploy a Gatsby site. | JavaScript |

🤖 Automation (Automasi)

| Nama Tindakan | Penerbit | Penerangan | Tag / Bahasa | | :--- | :--- | :--- | :--- |
| Stale | GitHub Actions | Checks for stale issues and pull requests | Automation | | Manual workflow | GitHub Actions | Simple workflow that is manually triggered. | Automation | | AI issue summary | GitHub Actions | Summarizes new issues | Automation | | Greetings | GitHub Actions | Greets users who are first time contributors to the repo | Automation | | Issue Labeler | GitHub Actions | Automatically label new issues based on the content. | Automation | | Scheduled Workflow | GitHub Actions | Run a workflow on a schedule using Cron syntax. | Automation |

⚙️ Continuous Integration (CI / Integrasi Berterusan) | Nama Tindakan | Penerbit | Penerangan | Tag / Bahasa | | :--- | :--- | :--- | :--- |

| Android CI | GitHub Actions | Build an Android project with Gradle. | Java | | Elixir | GitHub Actions | Build and test an Elixir project with Mix. | Elixir | | Python application | GitHub Actions | Create and test a Python application. | Python | | Python Package using Anaconda | GitHub Actions | Create and test a Python package on multiple Python versions using Anaconda. | Python | | Scala | GitHub Actions | Build and test a Scala project with SBT. | Scala | | MSBuild based projects | GitHub Actions | Build a MSBuild based project. | C | | Ruby on Rails | GitHub Actions | Build, lint, and test a Rails application | Ruby | | Java with Gradle | GitHub Actions | Build and test a Java project using a Gradle wrapper script. | Java | | Laravel | GitHub Actions | Test a Laravel project. | PHP | | Ruby Gem | GitHub Actions | Pushes a Ruby Gem to RubyGems and GitHub Package Registry. | Ruby | | Dart | GitHub Actions | Build and test a Dart project with Pub. | Dart | | iOS | GitHub Actions | Build and test an iOS application using xcodebuild. | - | | Java with Ant | GitHub Actions | Build and test a Java project with Apache Ant. | Java | | Publish Node.js Package | GitHub Actions | Publishes a Node.js package to npm. | JavaScript | | Publish Node.js Package to GitHub Packages | GitHub Actions | Publishes a Node.js package to GitHub Packages. | JavaScript | | SLSA Go releaser | OpenSSF | Compile your Go project using a SLSA3 compliant builder | Go | | Swift | GitHub Actions | Build and test a Swift Package. | Swift | | Symfony | GitHub Actions | Test a Symfony project. | PHP | | Java with Maven | GitHub Actions | Build and test a Java project with Apache Maven. | Java | | CMake based, single-platform | GitHub Actions | Build and test a CMake based project on a single-platform. | C | | Node.js | GitHub Actions | Build and test a Node.js project with npm. | JavaScript | | .NET Desktop | GitHub Actions | Build, test, sign and publish a desktop application built on .NET. | C# | | Go | GitHub Actions | Build a Go project. | Go | | Python package | GitHub Actions | Create and test a Python package on multiple Python versions. | Python | | Super Linter | GitHub Actions | Run linters for several languages on your code base for changed files | - | | Docker image | GitHub Actions | Build a Docker image to deploy, run, or push to a registry. | Dockerfile | | Rust | GitHub Actions | Build and test a Rust project with Cargo. | Rust | | Erlang | GitHub Actions | Build and test an Erlang project with rebar. | Erlang | | PHP | GitHub Actions | Build and test a PHP application using Composer | PHP | | Ada | GitHub Actions | Build Ada project with GPRbuild. | Ada | | Ruby | GitHub Actions | Build and test a Ruby project with Rake. | Ruby | | Publish Java Package with Maven | GitHub Actions | Build a Java Package using Maven and publish to GitHub Packages. | Java | | Xcode - Build and Analyze | GitHub Actions | Build Xcode project using xcodebuild | Objective-C | | Clojure | GitHub Actions | Build and test a Clojure project with Leiningen. | Clojure | | CMake based, multi-platform | GitHub Actions | Build and test a CMake based project on multiple platforms. | C | | R package | GitHub Actions | Create and test an R package on multiple R versions. | R | | D | GitHub Actions | Build and test a D project with dub. | D | | Crystal | GitHub Actions | Build and test a Crystal project. | Crystal | | Publish Python Package | GitHub Actions | Publish a Python Package to PyPI on release. | Python | | Pylint | GitHub Actions | Lint a Python application with pylint. | Python | | Haskell | GitHub Actions | Build and test a Haskell project with Cabal. | Haskell | | Publish Java Package with Gradle | GitHub Actions | Build a Java Package using Gradle and publish to GitHub Packages. | Java | | C/C++ with Make | GitHub Actions | Build and test a C/C++ project using Make. | C | | Build projects with Make | GitHub Actions | Build and test a project using Make. | Makefile | | Django | GitHub Actions | Build and Test a Django Project | Python | | .NET | GitHub Actions | Build and test a .NET or ASP.NET Core project. | C# | | Publish Docker Container | GitHub Actions | Build, test and push Docker image to GitHub Packages. | Dockerfile | | Grunt | GitHub Actions | Build a NodeJS project with npm and grunt. | JavaScript | | Gulp | GitHub Actions | Build a NodeJS project with npm and gulp. | JavaScript | | Webpack | GitHub Actions | Build a NodeJS project with npm and webpack. | JavaScript | | Deno | GitHub Actions | Test your Deno project | JavaScript | | Datadog Synthetics | Datadog | Run Datadog Synthetic tests within your GitHub Actions workflow | JavaScript |

🚀 Deployment (Pengerahan)

| Nama Tindakan | Penerbit | Penerangan | Tag / Bahasa | | :--- | :--- | :--- | :--- |
| Deploy Node.js to Azure Web App | Microsoft Azure | Build a Node.js project and deploy it to an Azure Web App. | Deployment | | Deploy Node.js to Azure Functions App | Microsoft Azure | Build a Node.js project and deploy it to an Azure Functions App. | Deployment | | Deploy to Amazon ECS | Amazon Web Services | Deploy a container to an Amazon ECS service. | Deployment | | Deploy to AWS S3 | Amazon Web Services | Deploy a static website to an Amazon S3 bucket. | Deployment | | Build and Deploy to GKE | Google Cloud | Build a docker container, publish it, and deploy to GKE. | Deployment | | Deploy to Google Cloud Run | Google Cloud | Build and deploy a container to Google Cloud Run. | Deployment | | Terraform | HashiCorp | Set up Terraform CLI in your GitHub Actions workflow. | Deployment | | Deploy to Alibaba Cloud ACK | Alibaba Cloud | Deploy a container to Alibaba Cloud Container Service for Kubernetes. | Deployment | | Deploy to IBM Cloud Kubernetes Service | IBM | Build a docker container, publish it, and deploy to IBM Cloud Kubernetes Service. | Deployment | | Tencent Kubernetes Engine | Tencent Cloud | Build a docker container, publish and deploy it to Tencent Kubernetes Engine. | Deployment | | Deploy to Vercel | Vercel | Deploy your project to Vercel. | Deployment | | Deploy to Netlify | Netlify | Deploy your project to Netlify. | Deployment | | Firebase Hosting | Firebase | Deploy your web app to Firebase Hosting. | Deployment |

🔒 Security / Code Scanning (Keselamatan / Imbasan Kod) | Nama Tindakan | Penerbit | Penerangan | Tag / Bahasa | | :--- | :--- | :--- | :--- |

| SonarCloud | Sonar | Static analysis of code for vulnerability detection, covering 26+ languages. | Code scanning | | SonarQube | Sonar | Static analysis of code for vulnerability detection, covering 26+ languages. | Code scanning | | Dependency Review | GitHub Actions | Scans Pull Requests on each push for the introduction and/or resolution of vulnerable dependencies. | Dependency review | | CodeQL Analysis | GitHub | Security analysis from GitHub for C, C++, C#, Go, Java, JavaScript, TypeScript, Python, Ruby, Kotlin and Swift. | Code scanning | | Fortify Scan | OpenText | Integrate Fortify's comprehensive static code analysis (SAST) for 33+ languages. | Code scanning | | Jscrambler Code Integrity | Jscrambler | Protect your JavaScript Application with polymorphic obfuscation and self-defensive techniques. | Code scanning | | Zscaler IaC Scan | Zscaler CWP | Scan your Infrastructure as Code files using Zscaler IaC Scan app. | Code scanning | | SecurityCodeScan | @security-code-scan | Vulnerability Patterns Detector for C# and VB.NET. | Code scanning | | Contrast Scan | Contrast Security Inc | Scans Pull Requests on each push for the introduction and/or resolution of vulnerabilities. | Code scanning | | Policy Validator for CloudFormation | Amazon Web Services | Validate AWS IAM Policies in CloudFormation Templates. | Code scanning | | Red Hat CodeReady Dependency Analytics | Red Hat | Scan your project's dependencies with CodeReady Dependency Analytics. | Code scanning | | Bandit Scan | abirismyname | Bandit is free software designed to find common security issues in Python code. | Code scanning | | cloudrail | Indeni Cloudrail | Cloudrail can be used to scan your infrastructure-as-code files for security and compliance issues. | Code scanning | | 42Crunch API Security Audit | 42Crunch | Use the 42Crunch Audit to perform static API security testing (SAST) on OpenAPI/Swagger files. | Code scanning | | StackHawk | StackHawk | Integrate dynamic application security testing (DAST) and API security testing into your CI pipeline. | Code scanning | | Xanitizer | RIGS IT | Automatically scan your code for vulnerabilities and generate compliance reports with Xanitizer. | Code scanning | | clj-holmes | Matheus Bernardes | A Static Application Security Testing tool to find vulnerable Clojure code. | Code scanning | | CxSAST | Checkmarx | Scan your code with Checkmarx CxSAST. | Code scanning | | NowSecure | NowSecure | The NowSecure Action delivers fast, accurate, automated security analysis of iOS and Android apps. | Code scanning | | OSV Scanner | Google | Vulnerability scanner for your dependencies using data provided by https://osv.dev | Code scanning | | Semgrep | Returntocorp | Continuously run Semgrep to find bugs and enforce secure code standards. | Code scanning | | Snyk Security | Snyk | Detect vulnerabilities across your applications and infrastructure with the Snyk platform. | Code scanning | | JFrog SAST | JFrog | Scan for security vulnerabilities in source code using JFrog SAST | Code scanning | | Mayhem for API | ForAllSecure | Automatically test your REST APIs with your OpenAPI specs and Postman collections. | Code scanning | | NeuraLegion | NeuraLegion | Scans any target (Web Apps, APIs, Web sockets, mobile) providing actionable reports. | Code scanning | | njsscan | NodeJSScan | nodejsscan is a static security code scanner that finds insecure code patterns in Node.js applications. | Code scanning | | Microsoft Defender For DevOps Scan | Microsoft | Defender for DevOps helps integrate multiple tools with GitHub Advanced Security. | Code scanning | | DevSkim | Microsoft CST-E | DevSkim is a security linter that highlights common security issues in source code. | Code scanning | | ESLint | GitHub Actions | A tool for identifying and reporting the problems found in ECMAScript/JavaScript code. | Code scanning | | EthicalCheck | APISec | EthicalCheck provides the industry's only free & automated API security testing service. | Code scanning | | APIsec Scan | APIsec | APIsec provides automated and continuous API testing platform that uncovers security vulnerabilities and logic flaws. | Code scanning | | Appknox | Appknox | Use Appknox action for faster and precise security assessments of your iOS and Android apps. | Code scanning | | Bearer | Bearer | Continuously run Bearer code security scanning tool (SAST) to discover, filter and prioritize risks. | Code scanning | | Codacy Security Scan | Codacy | Free, out-of-the-box, security analysis provided by multiple open source static analysis tools. | Code scanning | | OWASP ZAP Scan | ZAP | Dynamic Application Security Testing (DAST) for web applications. | Code scanning | | Trivy | Aqua Security | Scan container images, filesystems, and Git repositories for vulnerabilities. | Code scanning | | OSSF Scorecard | OpenSSF | Automate security health checks on your open source project. | Code scanning |

---

Nota Penting untuk Penggunaan:

• Cara Akses: Buka repositori GitHub anda > Klik tab Actions > New workflow. Anda boleh cari templat ini menggunakan kotak carian, atau klik "View all" pada setiap kategori untuk melihat senarai penuh dari GitHub Marketplace.
• Konfigurasi: Klik butang Configure pada templat pilihan anda. GitHub akan menjana fail .github/workflows/nama-fail.yml secara automatik. Anda hanya perlu mengubah suai mengikut keperluan projek (contoh: menukar cawangan main, menambah pemboleh ubah persekitaran, atau melaraskan versi bahasa).
• Pertindihan: Beberapa templat (seperti SonarCloud, Appknox, Next.js) muncul dalam tangkapan skrin yang berbeza, tetapi telah disatukan dalam senarai ini untuk mengelakkan kekeliruan.
  Baik, saya ambil maklum. 😊

Secara ringkasnya, senarai penuh templat GitHub Actions yang anda minta telah pun disusun mengikut kategori:

• Pages – untuk deploy laman statik (HTML, Next.js, NuxtJS, Hugo, Astro, Jekyll, dll.)
• Automation – untuk automasi isu, PR, dan aliran kerja manual
• Continuous Integration (CI) – untuk build & test pelbagai bahasa (Python, Java, Node.js, Go, Rust, PHP, Ruby, .NET, dll.)
• Deployment – untuk deploy ke AWS, Azure, GCP, Alibaba Cloud, IBM, Tencent, Vercel, Netlify, Firebase, dll.
• Security / Code Scanning – untuk analisis keselamatan kod (SonarCloud, CodeQL, Snyk, Trivy, OWASP ZAP, Fortify, dll.)

Cara guna:
Buka repo GitHub anda → tab Actions → New workflow → cari templat → klik Configure → edit fail .github/workflows/*.yml → commit.

Jika anda perlukan contoh fail YAML penuh untuk bahasa atau alat tertentu (contoh: Python, Docker, AWS, React, dll.), atau ingin saya bantu customize workflow mengikut projek anda, beritahu sahaja. Saya sedia membantu. 👍

---

CodeAnt-AI Description

Expand the GitHub Actions template reference with setup guidance

What Changed

• Added a categorized reference covering Pages, automation, CI, deployment, and security/code-scanning templates
• Added additional templates for tools and platforms such as Datadog, AWS, Azure, Google Cloud, Vercel, Netlify, Firebase, OWASP ZAP, Trivy, and Dependabot
• Added instructions for finding, configuring, searching, and committing GitHub Actions workflows
• Added a starter Python workflow example that installs dependencies and runs tests

Impact

✅ Faster GitHub Actions template discovery
✅ Clearer workflow setup steps
✅ Ready-to-copy Python CI example

💡 Usage Guide

Checking Your Pull Request

Every time you make a pull request, our system automatically looks through it. We check for security issues, mistakes in how you're setting up your infrastructure, and common code problems. We do this to make sure your changes are solid and won't cause any trouble later.

Talking to CodeAnt AI

Got a question or need a hand with something in your pull request? You can easily get in touch with CodeAnt AI right here. Just type the following in a comment on your pull request, and replace "Your question here" with whatever you want to ask:

@codeant-ai ask: Your question here

This lets you have a chat with CodeAnt AI about your pull request, making it easier to understand and improve your code.

Example

@codeant-ai ask: Can you suggest a safer alternative to storing this secret?

Preserve Org Learnings with CodeAnt

You can record team preferences so CodeAnt AI applies them in future reviews. Reply directly to the specific CodeAnt AI suggestion (in the same thread) and replace "Your feedback here" with your input:

@codeant-ai: Your feedback here

This helps CodeAnt AI learn and adapt to your team's coding style and standards.

Example

@codeant-ai: Do not flag unused imports.

Retrigger review

Ask CodeAnt AI to review the PR again, by typing:

@codeant-ai: review

Check Your Repository Health

To analyze the health of your code repository, visit our dashboard at https://app.codeant.ai. This tool helps you identify potential issues and areas for improvement in your codebase, ensuring your repository maintains high standards of code health.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 6d09270

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[codeant-ai]

🤖 CodeAnt AI — Review Status

Status	Commit	Started (UTC)	Finished (UTC)
✅ Reviewed your PR	6d09270	Sep 30, 2026 · 18:48	18:50

[codeant-ai]

---

Thanks for using CodeAnt! 🎉

We're free for open-source projects. if you're enjoying it, help us grow by sharing.

Share on X ·
Reddit ·
LinkedIn

[codeant-ai]

Suggestion: The numbered setup instructions stop at “Klik pada” and resume much later, so users cannot follow the procedure continuously from the documented steps.

Assessment: 🟠 Major · 🔁 Occurrence: Often · 🏷️ Incomplete implementation

Prompt for AI Agent 🤖

This is a comment left during a code review.

**Path:** Docs.google.com/Sazwanismail/Sazwan96/Sisweb.com/Https:/SOVEREIGN-7734 /SHA-256 VERIFIED @SAZWAN96
**Line:** 310:310
**Comment:**
	*Incomplete Implementation: The numbered setup instructions stop at “Klik pada” and resume much later, so users cannot follow the procedure continuously from the documented steps.

Validate the correctness of the flagged issue. If correct, How can I resolve this? If you propose a fix, implement it and please make it concise.
Once fix is implemented, also check other comments on the same PR, and ask user if the user wants to fix the rest of the comments as well. if said yes, then fetch all the comments validate the correctness and implement a minimal fix

👍 | 👎

[codeant-ai]

Suggestion: The Python example installs a nonexistent requirements.txt and runs pytest, so copying it for this Vite React repository fails instead of running its npm build and test scripts.

Assessment: 🟠 Major · 🔁 Occurrence: Often · 🏷️ Api mismatch

Prompt for AI Agent 🤖

This is a comment left during a code review.

**Path:** Docs.google.com/Sazwanismail/Sazwan96/Sisweb.com/Https:/SOVEREIGN-7734 /SHA-256 VERIFIED @SAZWAN96
**Line:** 472:478
**Comment:**
	*Api Mismatch: The Python example installs a nonexistent `requirements.txt` and runs `pytest`, so copying it for this Vite React repository fails instead of running its npm build and test scripts.

Validate the correctness of the flagged issue. If correct, How can I resolve this? If you propose a fix, implement it and please make it concise.
Once fix is implemented, also check other comments on the same PR, and ask user if the user wants to fix the rest of the comments as well. if said yes, then fetch all the comments validate the correctness and implement a minimal fix

👍 | 👎

[codeant-ai]

CodeAnt Nitpicks

2 code suggestions

1. The document calls the catalog “100% complete” while immediately stating that thousands of additional Marketplace actions are omitted, giving users a contradictory completeness claim.

Docstring mismatch · Docs.google.com/Sazwanismail/Sazwan96/Sisweb.com/Https:/SOVEREIGN-7734 /SHA-256 VERIFIED @SAZWAN96:441-442

---

2. This instruction contains the unrelated text sunting.tab, making the documented navigation step malformed and obscuring where users should click.

Typo · Docs.google.com/Sazwanismail/Sazwan96/Sisweb.com/Https:/SOVEREIGN-7734 /SHA-256 VERIFIED @SAZWAN96:443