Skip to main content
GitHub Actions is the most widely adopted CI/CD platform for teams already using GitHub, and Hellenic Technologies designs and maintains workflow configurations that are fast, secure, and easy to extend. Good Actions workflows run only necessary jobs, cache aggressively, parallelise independent steps, and fail fast with clear error messages — not the sprawling, slow, hard-to-debug pipelines that give CI/CD a bad reputation. Secrets management is a critical security concern in Actions workflows. We never store sensitive values in workflow YAML files or repository variables that could appear in logs. Instead, we use GitHub Environments with required reviewers for production deployments, OIDC (OpenID Connect) to authenticate with AWS, GCP, and Azure without storing long-lived credentials as secrets, and HashiCorp Vault or AWS Secrets Manager for application-level secrets that need to be injected at deploy time. Matrix builds enable parallel test execution across multiple language versions, operating systems, or test suites, reducing CI time for projects with comprehensive test suites. We configure smart caching for package managers (npm, pip, cargo, go modules) and Docker layer caching via GitHub Actions cache to keep build times under two minutes for most projects. Reusable workflows and composite actions eliminate duplication across repositories. GitHub Actions services we design and maintain:
  • Workflow design: lint → test → build → deploy with parallel job execution
  • OIDC authentication setup for AWS, GCP, and Azure (no stored credentials)
  • GitHub Environments with required reviewers for production deployments
  • Matrix build configuration for multi-version and multi-platform testing
  • Dependency caching: npm, pip, composer, go modules, and Docker layers
  • Reusable workflow library for shared CI steps across repositories
  • Self-hosted runner setup on Hetzner or cloud VMs for private workloads
  • Secrets rotation procedures and audit of existing secrets usage
  • Deployment status notifications to Slack and GitHub deployment tracking
  • Actions workflow optimisation for cost and runtime reduction