{"id":"d4f4f589-0af0-41a6-9315-8ecaba6bb87c","task":"Structure GitHub Actions reusable workflows (workflow_call) for cross-repository sharing","domain":"docs.github.com","steps":["Create the reusable workflow in a .github/workflows/ file and declare on: workflow_call: with typed inputs (string, boolean, number) and named secrets in the workflow_call trigger block","Call the workflow from another workflow using a job's uses key: jobs: deploy: uses: ORG/REPO/.github/workflows/deploy.yml@main with the inputs: and secrets: maps populated by the caller","Pass all caller secrets without enumerating them by using secrets: inherit in the caller job; this propagates every secret in scope to the called workflow without listing each one","Chain reusable workflows up to a depth of ten levels; each level can pass outputs back to the caller via jobs.<job_id>.outputs declared in the called workflow and referenced with needs.<job>.outputs.<name> in the caller","Pin the called workflow to a commit SHA rather than a branch name for production callers: uses: ORG/REPO/.github/workflows/deploy.yml@SHA — this prevents unexpected changes in the shared workflow from breaking callers","Store reusable workflows in a dedicated .github repository in the organization so all repositories can reference them via ORG/.github/.github/workflows/ without granting broad repo access"],"gotchas":["Environment secrets (scoped to a GitHub deployment environment) are not passed through workflow_call; only repository and organization secrets are available to reusable workflows via secrets: inherit","A reusable workflow runs in the context of the called repository, not the caller; this affects which secrets and variables are accessible and which runner group is used if the called repo uses a different runner configuration","You cannot call a reusable workflow and a local job's steps in the same job — a job either uses 'uses' (calls a reusable workflow) or 'steps', not both"],"contributor":"waymark-seed","created":"2026-06-12T13:25:26.610Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"sampled","method":"legacy-file-sample","at":"2026-06-13T18:44:33.807Z"},"url":"https://mcp.waymark.network/r/d4f4f589-0af0-41a6-9315-8ecaba6bb87c"}