Struct GitHubActionsEmitter 

pub struct GitHubActionsEmitter {
    pub runner: String,
    pub use_nix: bool,
    pub use_cachix: bool,
    pub cachix_name: Option<String>,
    pub cachix_auth_token_secret: String,
    pub default_paths_ignore: Vec<String>,
    pub build_cuenv: bool,
    pub approval_environment: String,
    pub configured_permissions: HashMap<String, String>,
}

GitHub Actions workflow emitter

Transforms cuenv IR into GitHub Actions workflow YAML that can be committed to .github/workflows/.

IR to GitHub Actions Mapping

IR Field	GitHub Actions
pipeline.name	Workflow name:
pipeline.trigger.branch	on.push.branches / on.pull_request.branches
task.id	Job key
task.command	Step with run: cuenv task {task.id}
task.depends_on	Job needs:
task.manual_approval	Job with environment:
task.concurrency_group	Job-level concurrency:
task.resources.tags	runs-on:
task.outputs (orchestrator)	actions/upload-artifact step

Fields

runner: String

Default runner for jobs

use_nix: bool

Include Nix installation steps

use_cachix: bool

Include Cachix caching steps

cachix_name: Option<String>

Cachix cache name

cachix_auth_token_secret: String

Cachix auth token secret name

default_paths_ignore: Vec<String>

Default paths to ignore in triggers

build_cuenv: bool

Include cuenv build step (via nix build)

approval_environment: String

Environment name for manual approval tasks

configured_permissions: HashMap<String, String>

Configured permissions from the manifest

Implementations

impl GitHubActionsEmitter

pub fn new() -> Self

Create a new GitHub Actions emitter with default settings

pub fn from_config(config: &GitHubConfig) -> Self

Create an emitter from a GitHubConfig manifest configuration.

This applies all configuration from the CUE manifest to the emitter.

pub fn runner_as_runs_on(&self) -> RunsOn

Get the configured runner as a RunsOn value

pub fn apply_configured_permissions( &self, permissions: Permissions, ) -> Permissions

Apply configured permissions to a base Permissions struct

pub fn with_runner(self, runner: impl Into<String>) -> Self

Set the default runner for jobs

pub const fn with_nix(self) -> Self

Enable Nix installation steps

pub const fn without_nix(self) -> Self

Disable Nix installation steps

pub fn with_cachix(self, name: impl Into<String>) -> Self

Enable Cachix caching with the given cache name

pub fn with_cachix_auth_token_secret(self, secret: impl Into<String>) -> Self

Set the Cachix auth token secret name

pub fn with_paths_ignore(self, paths: Vec<String>) -> Self

Set default paths to ignore in triggers

pub const fn without_cuenv_build(self) -> Self

Disable automatic cuenv build step

pub fn with_approval_environment(self, env: impl Into<String>) -> Self

Set the environment name for manual approval tasks

pub fn emit_workflows( &self, ir: &IntermediateRepresentation, ) -> EmitterResult<HashMap<String, String>>

Emit multiple workflow files for projects with multiple pipelines.

Returns a map of filename to YAML content. Each pipeline in the IR generates a separate workflow file.

Errors

Returns EmitterError::Serialization if YAML serialization fails.

pub fn render_phase_steps( ir: &IntermediateRepresentation, ) -> (Vec<Step>, IndexMap<String, String>)

Render phase tasks (bootstrap + setup) into GitHub Actions steps.

Returns a tuple of:

• Vec<Step> - rendered steps for bootstrap and setup phase tasks
• IndexMap<String, String> - secret env vars that should be passed to task steps

This uses GitHubStageRenderer to properly convert phase tasks into steps, handling both uses: action steps and run: command steps.

pub fn build_simple_job( &self, task: &Task, ir: &IntermediateRepresentation, environment: Option<&String>, project_path: Option<&str>, ) -> Job

Build a simple job from an IR task (no matrix expansion).

This method creates a single job that:

1. Checks out the repository
2. Runs bootstrap/setup phase tasks (Nix, cuenv, 1Password, etc.)
3. Runs the task with --skip-dependencies (since CI handles job dependencies)

Use build_matrix_jobs for tasks with matrix configurations.

Arguments

• task - IR task to build job for
• ir - Intermediate representation containing phase tasks
• environment - Optional environment name for the task
• project_path - Optional working directory (for monorepo projects)

pub fn build_artifact_aggregation_job( &self, task: &Task, ir: &IntermediateRepresentation, environment: Option<&String>, previous_jobs: &[String], project_path: Option<&str>, ) -> Job

Build an artifact aggregation job from an IR task with artifact_downloads.

This creates a job that:

1. Checks out the repository
2. Runs bootstrap/setup phase tasks
3. Downloads artifacts from previous jobs
4. Runs the task with params and --skip-dependencies

Use this for tasks that aggregate outputs from matrix jobs (e.g., publish).

Arguments

• task - IR task to build job for
• ir - Intermediate representation containing phase tasks
• environment - Optional environment name for the task
• previous_jobs - Jobs that must complete before this job
• project_path - Optional working directory (for monorepo projects)

pub fn build_matrix_jobs( &self, task: &Task, ir: &IntermediateRepresentation, environment: Option<&String>, arch_runners: Option<&HashMap<String, String>>, previous_jobs: &[String], project_path: Option<&str>, ) -> IndexMap<String, Job>

Build matrix-expanded jobs from an IR task with matrix configuration.

This expands a single task into multiple jobs, one per matrix combination. Currently supports single-dimension matrix expansion (arch).

Returns an IndexMap of job_id -> Job for each matrix combination.

Arguments

• task - IR task with matrix configuration
• ir - Intermediate representation containing phase tasks
• environment - Optional environment name for the task
• arch_runners - Optional mapping of arch -> runner label
• previous_jobs - Jobs that must complete before these matrix jobs
• project_path - Optional working directory (for monorepo projects)

pub fn task_has_matrix(task: &Task) -> bool

Check if a task has matrix configuration.

pub const fn task_has_artifact_downloads(task: &Task) -> bool

Check if a task has artifact downloads (aggregation task).

Trait Implementations

impl Clone for GitHubActionsEmitter

fn clone(&self) -> GitHubActionsEmitter

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for GitHubActionsEmitter

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for GitHubActionsEmitter

fn default() -> Self

Returns the “default value” for a type.

impl Emitter for GitHubActionsEmitter

fn emit_thin(&self, ir: &IntermediateRepresentation) -> EmitterResult<String>

Emit a thin mode GitHub Actions workflow.

Thin mode generates a single-job workflow that:

1. Runs bootstrap phase steps (e.g., install Nix)
2. Runs setup phase steps (e.g., build cuenv)
3. Executes cuenv ci --pipeline <name> for orchestration
4. Runs success/failure phase steps with conditions

fn emit_expanded( &self, ir: &IntermediateRepresentation, ) -> EmitterResult<String>

Emit an expanded mode GitHub Actions workflow.

Expanded mode generates a multi-job workflow where each task becomes a separate job with dependencies managed by GitHub Actions (needs:).

fn format_name(&self) -> &'static str

Get the format identifier for this emitter

fn file_extension(&self) -> &'static str

Get the file extension for output files

fn description(&self) -> &'static str

Get a human-readable description of this emitter

fn validate(&self, ir: &IntermediateRepresentation) -> EmitterResult<()>

Validate the IR before emission

fn emit(&self, ir: &IntermediateRepresentation) -> Result<String, EmitterError>

Emit a CI configuration based on the mode in the IR.