---
description: Rules for GitHub Actions workflows and release automation
globs:
  - .github/workflows/**
alwaysApply: false
---

<!-- Generated by scripts/generate_ai_collab_docs.py. Edit metadata in that script. -->

# Cursor Rule: GitHub Workflows

- Inspect the affected workflow triggers, path filters, and downstream jobs
  before changing GitHub automation behavior.

- Keep secrets, tokens, registry credentials, and toggles in GitHub Actions
  secrets or vars instead of hardcoding them in workflow YAML.

- Preserve release and image-tag semantics across `prepare-release.yml`,
  `build-latest.yml`, and `build-on-release.yml` instead of changing one
  workflow in isolation.

- Keep workflow trigger scope narrow and review backend, frontend, Docker, or
  scripts path filters when automation ownership moves.
