♻️ Potos GitHub Actions
Reusable workflows and composite actions for Project Potos CI/CD pipelines.
All pipelines come from this repository: one place where third-party actions
are selected, SHA-pinned, audited, and kept up to date.
Ansible Collections
Sanity checks, ansible-lint, molecule tests and releases for collections.
Container Images
Build images and push them to GitHub Packages, with a keyless build-provenance attestation attached to every pushed image.
Lint
One generic lint suite: yamllint, actionlint, zizmor, ruff, hadolint, and shellcheck.
Zensical Docs
Build and deploy Zensical documentation sites to GitHub Pages.
Semantic Release
Automated releases with go-semantic-release and Conventional Commits.
Least-Privilege by Default
Every workflow declares the minimum permissions it needs, and the
security docs map all controls to the ENISA Technical Advisory
for secure package use.