GitHub Actions reusable workflows

<p>Multiple repositories have duplicate CI/CD logic (lint, test, build). Updating the workflow in each repo separately is error-prone. Need a single source of truth for shared CI steps.</p>

<p>Create a reusable workflow in a central repo and call it from others:</p> <div class="highlight"><pre><span></span><code><span class="c1"># .github/workflows/reusable-python-ci.yml (in shared-workflows repo)</span> <span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">Python CI</span> <span class="nt">on</span><span class="p">:</span> <span class="w"> </span><span class="nt">workflow_call</span><span class="p">:</span> <span class="w"> </span><span class="nt">inputs</span><span class="p">:</span> <span class="w"> </span><span class="nt">python-version</span><span class="p">:</span> <span class="w"> </span><span class="nt">description</span><span class="p">:</span><span class="w"> </span><span class="s">'Python</span><span class="nv"> </span><span class="s">version</span><span class="nv"> </span><span class="s">to</span><span class="nv"> </span><span class="s">use'</span> <span class="w"> </span><span class="nt">type</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">string</span> <span class="w"> </span><span class="nt">default</span><span class="p">:</span><span class="w"> </span><span class="s">'3.12'</span> <span class="w"> </span><span class="nt">working-directory</span><span class="p">:</span> <span class="w"> </span><span class="nt">type</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">string</span> <span class="w"> </span><span class="nt">default</span><span class="p">:</span><span class="w"> </span><span class="s">'.'</span> <span class="w"> </span><span class="nt">secrets</span><span class="p">:</span> <span class="w"> </span><span class="nt">CODECOV_TOKEN</span><span class="p">:</span> <span class="w"> </span><span class="nt">required</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">false</span> <span class="nt">jobs</span><span class="p">:</span> <span class="w"> </span><span class="nt">lint-and-test</span><span class="p">:</span> <span class="w"> </span><span class="nt">runs-on</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">ubuntu-latest</span> <span class="w"> </span><span class="nt">defaults</span><span class="p">:</span> <span class="w"> </span><span class="nt">run</span><span class="p">:</span> <span class="w"> </span><span class="nt">working-directory</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">${{ inputs.working-directory }}</span> <span class="w"> </span><span class="nt">steps</span><span class="p">:</span> <span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">uses</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">actions/checkout@v4</span> <span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">Install uv</span> <span class="w"> </span><span class="nt">uses</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">astral-sh/setup-uv@v3</span> <span class="w"> </span><span class="nt">with</span><span class="p">:</span> <span class="w"> </span><span class="nt">python-version</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">${{ inputs.python-version }}</span> <span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">Install dependencies</span> <span class="w"> </span><span class="nt">run</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">uv sync --frozen</span> <span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">Lint</span> <span class="w"> </span><span class="nt">run</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">uv run ruff check . &amp;&amp; uv run ruff format --check .</span> <span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">Test</span> <span class="w"> </span><span class="nt">run</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">uv run pytest --cov --cov-report=xml</span> <span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">Upload coverage</span> <span class="w"> </span><span class="nt">if</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">${{ secrets.CODECOV_TOKEN != '' }}</span> <span class="w"> </span><span class="nt">uses</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">codecov/codecov-action@v4</span> <span class="w"> </span><span class="nt">with</span><span class="p">:</span> <span class="w"> </span><span class="nt">token</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">${{ secrets.CODECOV_TOKEN }}</span> </code></pre></div> <div class="highlight"><pre><span></span><code><span class="c1"># .github/workflows/ci.yml (in consumer repo)</span> <span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">CI</span> <span class="nt">on</span><span class="p">:</span><span class="w"> </span><span class="p p-Indicator">[</span><span class="nv">push</span><span class="p p-Indicator">,</span><span class="w"> </span><span class="nv">pull_request</span><span class="p p-Indicator">]</span> <span class="nt">jobs</span><span class="p">:</span> <span class="w"> </span><span class="nt">python-ci</span><span class="p">:</span> <span class="w"> </span><span class="nt">uses</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">my-org/shared-workflows/.github/workflows/reusable-python-ci.yml@main</span> <span class="w"> </span><span class="nt">with</span><span class="p">:</span> <span class="w"> </span><span class="nt">python-version</span><span class="p">:</span><span class="w"> </span><span class="s">'3.12'</span> <span class="w"> </span><span class="nt">working-directory</span><span class="p">:</span><span class="w"> </span><span class="s">'api'</span> <span class="w"> </span><span class="nt">secrets</span><span class="p">:</span> <span class="w"> </span><span class="nt">CODECOV_TOKEN</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">${{ secrets.CODECOV_TOKEN }}</span> </code></pre></div> <p>Reusable workflows use <code>workflow_call</code> trigger. Inputs are typed (string, boolean, number). Secrets are passed explicitly — they're not inherited automatically. Reference with <code>{owner}/{repo}/.github/workflows/{file}@{ref}</code>.</p>