Scroll · a skill or plugin

gh-aw

github/gh-aw

Not yet reviewedPlugins

GitHub Agentic Workflows

View on GitHubCompare 12 alternatives How we review projects

Topics

actions cai ci claude-code codex copilot gh-extension github-actions

Understand it first

Don’t install what you can’t explain. Each of these free tools reads github/gh-aw when you swap github.com in its link for another address.

See the architecturegitdiagram.com/github/gh-aw
An interactive diagram of how the parts fit together. Generated by AI.
Read the manualdeepwiki.com/github/gh-aw
A written guide to the codebase, with a chat you can ask questions. Generated by AI.
Browse in an editorgithub.dev/github/gh-aw
Opens the code in VS Code in your browser. Needs a GitHub sign-in. Same as pressing . on any GitHub repo.
Get it as one filegitingest.com/github/gh-aw
The whole project as a single text file to paste into Claude or another assistant. Large repos may not fit in one chat.
Or build it on your computer
npx techandria digest github/gh-aw
Built from the current code, which Techandria hasn’t reviewed. The file says so at the top. Add --only src for part of a large repo.
Let your agent read itgitmcp.io/github/gh-aw
A remote MCP server your agent can connect to and read the docs and code live while it works.
Add it to Claude Code
claude mcp add --transport http gh-aw-docs https://gitmcp.io/github/gh-aw

The linked sites are independent services, not part of Techandria. They read the default branch as it is now, not the reviewed commit, and AI-written explanations can be wrong. Repository text you paste into an assistant can contain instructions aimed at it, so treat it as data. None of this is a security review.

Install

A plugin packages commands and behaviour for your agent. Installing one copies it into your agent’s plugin directory. More about plugins.

Not available through Techandria. Techandria only installs commits a person has approved. This one has not been.

You can still get the code from the source and read it yourself:

git clone https://github.com/github/gh-aw

What we checked

Not yet reviewed

Discovery metadata only. Nothing has been scanned or approved, so this is a listing — not a recommendation to run the code.

Nothing has been scanned for this repository yet, so there is nothing to report. Listing here is not permission or a recommendation to run the code.

Maintain this project? Add the review badge to your README

The badge shows this project's current review state and updates on its own — including if the state changes. It links back to this page.

[![Techandria](https://techandria.com/badge/github/gh-aw.svg)](https://techandria.com/project/github/gh-aw)

README

Loading README from GitHub…

GitHub Agentic Workflows

Agent quick links

Hello fellow agent! Welcome to GitHub Agentic Workflows = Actions + Agent + Safety. Here are some pointers to get you started in using this tool.

Create a new workflow: https://raw.githubusercontent.com/github/gh-aw/main/create.md
Install: https://raw.githubusercontent.com/github/gh-aw/main/install.md
Package a workflow repository: https://raw.githubusercontent.com/github/gh-aw/main/package.md
Reference: https://raw.githubusercontent.com/github/gh-aw/main/.github/aw/github-agentic-workflows.md

GitHub Agentic Workflows (gh-aw) lets developers define AI-powered repository automation in Markdown with YAML frontmatter and run AI agents securely through GitHub Actions. The gh-aw GitHub CLI extension compiles each agentic workflow into a standard GitHub Actions workflow.

Use conventional GitHub Actions for deterministic builds, tests, linting, deployments, and reproducible scripts. Add an agentic workflow when a task needs reasoning or interpretation, such as issue triage, pull-request review, CI failure investigation, documentation maintenance, dependency analysis, or repository reporting. GitHub Agentic Workflows complements existing CI/CD; it does not replace it.

Built-in AI engines include GitHub Copilot, Claude Code, OpenAI Codex, Google Gemini, and Pi. Agent jobs are read-only and sandboxed by default, and configured GitHub writes are normally applied through validated safe-outputs jobs with scoped permissions.

Quick Start
How Agentic Workflows work
Security and permissions
Documentation
Contributing
Community Contributions
Related Projects
Workshop

Note

A security vulnerability was discovered in versions >= 0.83.3, < 0.85.4 and, as a result, those releases were retired as a pre-emptive measure.

Quick Start

Install the GitHub CLI extension:

gh extension install github/gh-aw

Then follow the GitHub Agentic Workflows quickstart to select an AI engine, add a sample workflow, and run it through GitHub Actions.

How Agentic Workflows work

An agentic workflow has two parts: YAML frontmatter configures triggers, permissions, tools, and the AI engine; the Markdown body tells the AI agent what to accomplish. The gh aw compile command validates this source and generates the .lock.yml workflow that GitHub Actions executes. Learn how GitHub Agentic Workflows works.

Security and permissions

Security, permissions, and controlled writes are core design concerns. The supported agent-job path defaults to read-only GitHub access and sandboxed execution. Safe outputs buffer configured writes, validate them, and apply them in separate jobs with scoped permissions. These controls are configurable, so workflow authors must review permissions, tools, network access, and generated files before deployment. Learn how GitHub Agentic Workflows handles security and permissions.

Using agentic workflows in your repository requires careful attention to security considerations and careful human supervision, and even then things can still go wrong. Use it with caution, and at your own risk.

Documentation

Use the GitHub Agentic Workflows documentation for these paths:

For AI agents and retrieval tools, use the published agent prompt index, full prompt corpus, and AI-readable project summary.

Contributing

For development setup and contribution guidelines, see CONTRIBUTING.md.

Custom Go linters

To build and test repository custom linters:

go test ./pkg/linters/<linter-name>/...
go build ./cmd/linters
make golint-custom

make golint-custom builds cmd/linters and runs the custom analyzers against ./cmd/... and ./pkg/....

🌍 Community Contributions

^{Community members whose issues were resolved — updated automatically.}

@a-sjogren-accenture (2) @aaronspindler (1) @abbottships (3) @abillingsley (2) @adam-cobb (1) @adamhenson (2) @adamtasteslikegood (1) @Adarsh1999 (1) @adhikjoshi (1) @aharper-srsacquiom (1) @ahmadabdalla (1) @ajfeldman6 (2) @akkikumar72 (1) @AkshatRaj00 (1) @alanpeabody (1) @alcastaneda (1) @AlexanderWert (1) @AlexDeMichieli (1) @alexsiilvaa (2) @alirezamirian (1) @alondahari (19) @alvistar (2) @AmoebaChant (1) @AnandhaSivam-00 (1) @anthonyhull-ford (2) @anthonymastreanvae (11) @aoxiangtianyu-go (1) @apenab (1) @arabkin (1) @arezero (6) @Arithmomaniac (1) @arthurfvives (8) @Artur- (1) @asatara (1) @askpaisa (1) @askpt (1) @astefan (1) @awoisoak (1) @b-dantas (1) @b2pacific (1) @babaakihiro (2) @bartul (1) @bbonafed (23) @beardofedu (1) @beingminimal (1) @benissimo (20) @BenjaminMichaelis (1) @benvillalobos (12) @bindsi (1) @bjartenilsen (1) @blavity-machine-user (1) @blozano-tt (11) @bmerkle (3) @boydj (2) @Bra1nFartz (1) @BrandonLewis (1) @brendanlapuma (1) @bryanchen-d (25) @bryanknox (1) @bshore-bf (1) @Calidus (9) @camposbrunocampos (2) @carlincherry (1) @carlosflorencio (1) @CatsMiaow (2) @chepa92 (1) @chrisfregly (2) @chrizbo (7) @CiscoRob (2) @ckittel (4) @cknight (2) @clementbolin (1) @cogni-ai-ee (2) @consulthys (3) @Corb3nik (3) @corygehr (22) @corymhall (2) @cristiano-turba (2) @crmitchelmore (3) @DaanLucas (1) @dagecko (1) @Daidanny008 (1) @Dan-Albrecht (1) @Dan-Co (2) @danielmarbach (1) @danielmeppiel (9) @danquirk (4) @darwin-gonzales (1) @David-Taylor-Aurora (1) @davidkarlsen (1) @davidRchSenacor (1) @davidslater (4) @dbudym-cs (1) @DeagleGross (6) @devantler (2) @deyaaeldeen (10) @dfrysinger (2) @dgolombek (1) @dholmes (3) @dhrapson (2) @DimaBir (1) @DjShah99 (1) @dkurepa (1) @dneimke (1) @DogeAmazed (1) @Dongbumlee (2) @doughgle (1) @drehelis (4) @DrPye (1) @dsfaccini (11) @dsibilio (4) @dsolteszopyn (2) @dsyme (40) @duncankmckinnon (1) @eaftan (3) @edburns (1) @edgeq (2) @ekbritecore (26) @elefthei (1) @elika56 (1) @emexelem (1) @enbw-mmattes (1) @envygit-bot (3) @eran-medan (1) @ericchansen (1) @ericstj (2) @Esomoire-consultancy-Company (1) @Etienne-M (5) @Evangelink (6) @fbecar22 (3) @fchareyr (1) @FDevTakima (1) @ferryhinardi (1) @flatiron32 (2) @florianbader (1) @fr4nc1sc0-r4m0n (6) @funkymonkeyjam (2) @G1Vh (1) @GandrotulaRajesh (1) @gh-antoine-brechon (4) @github-actions (11) @GKersten (1) @glitch-ux (1) @golivax (2) @grahame-white (9) @graphaelli (1) @GregoireW (2) @gregsmi (2) @h-no (1) @h3y6e (2) @haavamoa (1) @haolpku (1) @HardMax71 (2) @harrisoncramer (2) @heaversm (1) @heiskr (9) @hermanho (1) @holwerda (3) @holymaloney (1) @hpsin (1) @hrishikeshathalye (1) @ianreay (1) @IEvangelist (14) @igolaizola (3) @ilja (5) @Infinnerty (1) @insop (1) @ivancea (11) @j-srodka (6) @JaganGopalkrish (1) @jamesadevine (4) @JamesNK (5) @JanKrivanek (4) @JanProvaznik (1) @jaroslawgajewski (47) @JasonYeMSFT (2) @Jasper13006 (1) @jbaruch (1) @jcooklin (1) @jeffhandley (12) @JeffreyCA (5) @jeremiah-snee-openx (1) @jeremymeng (1) @jfomhover (1) @jhamon (2) @jiec-msft (1) @jitran (6) @JKamsker (1) @jkim323 (1) @jkupaMSFT (1) @joesturge (1) @johndowns (2) @JohnMarsden24 (2) @johnpreed (5) @johnwilliams-12 (14) @jonas-harmoney (2) @jonathanpeppers (5) @joperezr (1) @JoshGreenslade (2) @joshjohanning (1) @joshuadavidson (1) @jpelgrom (1) @jsalmassy (1) @jsoref (2) @jsquire (1) @jtracey93 (1) @JTrillo (1) @kaovilai (4) @karl-petter-sj (1) @katriendg (1) @kaush (1) @KB1RMA (1) @kbreit-insight (5) @kdowswell (6) @KGoovaer (1) @kkruel8100 (4) @Knufle (1) @Krzysztof-Cieslak (1) @kthompson (1) @kubaflo (1) @KushnirT (1) @l-trotta (1) @labudis (2) @ladamski (1) @laysa-enmacc (1) @lbenie (1) @lecoursen (1) @lfgcampos (1) @lilseyi (2) @lindeberg (1) @lkraav (1) @loganrosen (11) @look (1) @lpcox (8) @ludoviclafole (1) @lukeed (1) @lupinthe14th (3) @lw396 (1) @lxghtless (1) @m-titov (1) @maikelvdh (2) @mark-hingston (1) @mason-tim (9) @massirr (1) @matiloti (4) @mattcosta7 (1) @MatthewBunker (2) @MatthewLabasan-NBCU (2) @MattSkala (17) @MauroDruwel (4) @mavam (1) @maxbeizer (1) @maxknv (1) @mcantrell (1) @mdashrraf (1) @MH0386 (2) @mhavelock (1) @michen00 (2) @microsasa (10) @misrarim (1) @mlinksva (1) @mmatur (2) @mmeeuwa (1) @mnkiefer (13) @molson504x (2) @Mossaka (3) @mrfelton (5) @mrjf (7) @MrSanchez (1) @mstrathman (1) @mthalman (1) @mur6 (1) @Muradbarakat1986 (1) @MureedSultan (2) @mvdbos (2) @mwpastore (2) @myaschmitz (1) @NadyaDrozdova (1) @nateberkopec (1) @nestele (2) @neta-vega (3) @NicoAvanzDev (3) @NicolasRannou (1) @niebloomj (12) @nihal467 (1) @Nikhil-Anand-DSG (1) @NikolajBjorner (2) @nmeisenzahl (1) @norrietaylor (12) @not-mksv (3) @ns-jcavarroc (1) @octatone (1) @oscarvalenzuelab (1) @patrickmontalto (1) @PaulAylward2 (1) @peter-hendy (1) @petercort (1) @pethers (1) @pgaskin (1) @pholleran (4) @Phonesis (1) @Pierrci (1) @plengauer (1) @pmalarme (1) @polmichel (2) @ppusateri (1) @praveenkuttappan (1) @prinsloopieter (1) @prpercival (2) @PureWeen (10) @pvds (1) @qwert666 (1) @r-garcia-de-oliveira (2) @rabeckett (2) @rabo-unumed (4) @racedale (1) @radiantspace (3) @rafael-unloan (1) @rbstp (5) @rdoume (1) @reggie-k (4) @remypanicker (1) @rhardouin (4) @ricohomewood (2) @rmarinho (1) @robertdewilde-dev (1) @robinmam (1) @romainh-betclic (3) @rspurgeon (4) @Rubyj (3) @ruokun-niu (1) @ryckmansm (2) @sabbasi3 (2) @SadriG91 (1) @salekseev (3) @salmanmkc (1) @samuelkahessay (30) @samus-aran (1) @SanthoshNandha (2) @sbodapati-gfm (1)

gh-aw

Understand it first

Install

What we checked

README

More in Plugins

cc-skills-golang

agents

context-mode

gentle-ai

GitHub Agentic Workflows

Contents

Quick Start

How Agentic Workflows work

Security and permissions

Documentation

Contributing

Custom Go linters

🌍 Community Contributions