CtrlK
BlogDocsLog inGet started
Tessl Logo

uinaf/gh-setup

Set up or align GitHub repo settings, branch/ruleset policy, templates, Actions hardening, Environments, release workflows, and deploy workflows for continuously publishable or deployable repositories.

82

1.08x
Quality

95%

Does it follow best practices?

Impact

77%

1.08x

Average score across 8 eval scenarios

SecuritybySnyk

Passed

No known issues

Overview
Quality
Evals
Security
Files

criteria.jsonevals/scenario-6/

{
  "context": "Tests whether the agent correctly distinguishes pull-request activity types from draft state and orders pnpm setup before setup-node's pnpm cache integration.",
  "type": "weighted_checklist",
  "checklist": [
    {
      "name": "Draft behavior explained",
      "description": "The explanation states that pull_request activity types such as opened and synchronize can fire for draft PRs, so including ready_for_review does not itself suppress draft CI",
      "max_score": 15
    },
    {
      "name": "Draft-aware job gate",
      "description": "Each pull-request entry job, or a shared root job that gates every dependent verification job, has an `if:` condition requiring `github.event.pull_request.draft == false` while remaining valid for every configured event",
      "max_score": 20
    },
    {
      "name": "Ready event retained",
      "description": "The pull_request trigger retains ready_for_review so verification starts when a draft is marked ready",
      "max_score": 10
    },
    {
      "name": "Update events retained",
      "description": "The trigger still handles opened, synchronize, and reopened pull-request activity",
      "max_score": 5
    },
    {
      "name": "pnpm installed first",
      "description": "pnpm/action-setup runs before actions/setup-node when setup-node is configured with `cache: pnpm`",
      "max_score": 20
    },
    {
      "name": "pnpm cache retained",
      "description": "actions/setup-node still configures the Node version and enables the pnpm store cache after pnpm is available",
      "max_score": 10
    },
    {
      "name": "Frozen install",
      "description": "The workflow installs dependencies with pnpm using the frozen lockfile behavior explicitly or through pnpm's documented CI default",
      "max_score": 5
    },
    {
      "name": "Unprivileged PR event",
      "description": "The workflow keeps `pull_request` and does not switch to `pull_request_target` or add write permissions or secrets",
      "max_score": 10
    },
    {
      "name": "Minimal correction",
      "description": "The solution changes only the draft gate and pnpm bootstrap order without unrelated workflow redesign",
      "max_score": 5
    }
  ]
}

SKILL.md

tile.json