1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
# Reusable workflow: run `skillpack verify` against an agent-distribution layer.
#
# Consumers add this to their own workflow:
#
# jobs:
# skillpack:
# uses: nordicnode/skillpack/.github/workflows/skillpack.yml@v0.9.0
#
# Pin to a released tag (e.g. `@v0.9.0`) — bump the pin to pick up new
# features.
#
# The job installs `skillpack` from crates.io, then runs `skillpack verify` in
# the consumer repo root. `verify` exits non-zero on any critical failure, so
# a broken skill pack blocks the consumer's PR — exactly the CI gate skillpack
# itself uses in its own `.github/workflows/ci.yml`.
#
# `verify` needs the real CLI on PATH (it spawns the documented `--help`), so
# the matrix + runtime-setup block mirrors skillpack's own CI verbatim — a
# consumer repo gets identical cross-OS coverage without hand-rolling setup-*
# actions for each language runtime. Consumers whose project has no language
# runtime on the matrix (a pure-library pack) can drop unused setup-* steps
# from a forked copy; this workflow keeps the full set so the default covers
# the eight language ecosystems skillpack supports.
name: skillpack verify
on:
workflow_call:
inputs:
skillpack-version:
description: 'crate version to install from crates.io (e.g. "0.9.0")'
required: false
type: string
default: '0.9.0'
jobs:
verify:
strategy:
fail-fast: false
matrix:
os:
runs-on: ${{ matrix.os }}
steps:
- uses: actions/checkout@v4
# Runtime prereqs — one setup-* action per language, lifted verbatim from
# skillpack/.github/workflows/ci.yml so consumers get identical coverage.
# The Go + Ruby installs let the `#[ignore]`-gated round-trip tests run
# in skillpack's own CI; for a consumer repo they only matter if the
# consumer's documented CLI is in one of those languages.
- uses: actions/setup-node@v4
with:
node-version: '20'
- uses: actions/setup-python@v5
with:
python-version: '3.12'
- uses: actions/setup-go@v5
with:
go-version: '1.22'
- uses: ruby/setup-ruby@v1
with:
ruby-version: '3.3'
- uses: shivammathur/setup-php@v2
with:
php-version: '8.3'
- uses: actions/setup-java@v4
with:
distribution: 'temurin'
java-version: '21'
- uses: actions/setup-dotnet@v4
with:
dotnet-version: '8.0'
# Install skillpack from crates.io (pinned by version input). `cargo
# install` requires a Rust toolchain; rely on the runner's default
# stable toolchain rather than pinning one — `verify` doesn't compile
# skillpack, it just runs the published binary.
- uses: dtolnay/rust-toolchain@master
with:
toolchain: 'stable'
- name: install skillpack
run: cargo install skillpack --version ${{ inputs.skillpack-version }} --locked
# Run verify with exit-code gating (critical failure → exit 1 → job
# fails → consumer's PR is blocked). Warnings pass (they do not gate).
# Pass --format json so the GitHub Actions log carries a structured
# report a consumer can scrape or paste into a PR comment.
- name: skillpack verify
run: skillpack verify --format json