Org catalog of GitHub Agentic Workflows for Basen repos.
Workflows live in .github/workflows/*.md. Other repos install them from here; they do not run automatically just because this catalog exists.
On the target repo (or org):
- gh-aw CLI:
gh extension install github/gh-aw - AI engine secret, e.g.
COPILOT_GITHUB_TOKEN(fine-grained PAT with Copilot Requests: Read), orANTHROPIC_API_KEY/OPENAI_API_KEY/GEMINI_API_KEY
From the target repo:
gh aw add bekk/bekk-basen-agentic-workflows/update-dependencies
gh aw compileOr deploy from this catalog:
gh aw deploy ./update-dependencies.md --repo bekk/<target-repo>Commit the .md and generated .lock.yml, then push.
gh aw run update-dependencies --repo bekk/<target-repo>Or: Actions → workflow → Run workflow.
After editing a .md workflow, compile and commit both files:
gh aw compileCI runs the same check on PRs/main and fails if lockfiles are stale.
Manual dependency updates (vulnerable first, then small safe bumps). Opens a [deps] PR or no-ops.
- Trigger:
workflow_dispatchonly - Skips if an open
[deps]PR already exists