git-workflow
Enforces the release-branch Git model: scaffold feature branches, open PRs with review checks, cut releases with tags, and view workflow reference.
SKILL.mdskills/git-workflow/SKILL.md
GitHubGit Workflow — Release-Branch Model
Enforce the release-branch Git model and help execute the correct git operations for your current context: start new work, open a PR, cut a release, or view the workflow reference.
Hard Rules (always enforced, no exceptions)
- Never commit or push directly to
main. If the current branch ismain, stop and create a new branch before making any changes. - Never force-push to
main. - All changes must reach
mainvia a PR from a release branch.
Instructions
When invoked, ask the user what they want to do (if not already specified):
"What would you like to do? (a) View the Git workflow reference (b) Start new work — scaffold a feature or fix branch (c) Open a PR for the current branch (d) Cut a release — merge release branch to main and tag (e) Resolve a merge conflict on the current branch (f) Manage stashes — list, view, apply, or drop stashes"
Then execute the appropriate action below.
Action (a) — View Workflow Reference
Print the full Git Workflow Reference section below.
Action (b) — Start New Work
Use Bash to fetch, confirm a clean working tree, and identify the current release branch:
git fetch origin git status --porcelain git for-each-ref --sort=-v:refname --count=1 --format='%(refname:lstrip=3)' 'refs/remotes/origin/release/*'If
git status --porcelainprints anything, stop and ask the user to commit or stash first. The last command prints the highestrelease/*branch by version order (for examplerelease/1.10, notorigin/release/1.10), so it can be used directly as<release-branch>. It only matches branches underrelease/, unlike a plaingrep release.No-release-branch fallback: If the command above returns no output (no
release/*branch exists), fall back to branching frommainand targetmainfor the PR. Inform the user:"No release branch found. Branching from
mainand the PR will targetmaindirectly. This is normal for simple repos and early-stage projects that do not yet use the release-branch model." In this case, replaceorigin/<release-branch>in step 4 withorigin/main, and use--base mainin thegh pr createcall in Action (c).Ask the user:
- Is this a new feature or a bug fix? (determines
feature/vsfix/prefix) - What is the task ID or short description? (e.g.
task-042,login-crash)
- Is this a new feature or a bug fix? (determines
Construct the branch name:
feature/task-XXX-short-descriptionorfix/task-XXX-short-description.Use Bash to create and check out the branch from the freshly fetched release branch (the fetch in step 1 keeps the base current):
git checkout -b <branch-name> origin/<release-branch>Without the fetch, a stale remote-tracking ref would create the branch off an old tip.
Confirm the branch was created and remind the user:
- Never commit directly to
mainor the release branch. - Open a PR from this branch into the release branch when work is complete.
- Never commit directly to
Action (c) — Open a PR
Use Bash to check the current branch and recent commits:
git branch --show-current git log --oneline -10Use Glob to check if
handoffs/reviews/exists. If it does, use Read on any open review artifacts to check for unresolved findings withseverity: critical | severe | moderate. If any exist, block the PR and inform the user these must be resolved first.Use Bash to identify the target release branch (same detection as Action (b); fall back to
mainif it prints nothing):git fetch origin git for-each-ref --sort=-v:refname --count=1 --format='%(refname:lstrip=3)' 'refs/remotes/origin/release/*'Use Read to check
handoffs/plans/for context to include in the PR description.Produce a PR description with: summary of changes, related task IDs, testing notes. Push the branch first so the PR has a head on the remote, then use Bash:
git push -u origin "$(git branch --show-current)" gh pr create --title "<title>" --body "<description>" --base <release-branch>If
ghis not available, print the PR body for the user to paste manually.
Action (d) — Cut a Release
Use Bash to confirm the current release branch is clean and all PRs are merged:
git status git log --oneline origin/main..HEADAsk the user for the version tag (e.g.
1.0.0).Open a release PR from the release branch into
main— all changes reachmainvia PR, including releases:gh pr create --base main --head release/<version> --title "Release v<version>" --body "<release summary>"If
ghis not available, print the PR body and ask the user to open the PR manually.After the PR is approved and merged, tag the release on
main. Confirm before pushing the tag:git checkout main git pull origin main git tag -a v<version> -m "Release v<version>" git push origin v<version>Use an annotated tag: it records the tagger, date, and message, and
git describeignores lightweight tags by default. If the user signs tags (git config --get tag.gpgSignprintstrue, or they ask for a signed tag), usegit tag -s v<version> -m "Release v<version>"instead.Remind the user to invoke
/abd-docs(or the Documentation agent) to create the changelog for this release indocs/CHANGELOG.mdordocs/changelogs/<version>.md.
Action (e) — Resolve a Merge Conflict
Use Bash to identify all conflicted files:
git statusList each file that shows
both modified,deleted by us,deleted by them, or any other conflict marker.Use Bash to fetch the latest remote state and show how far behind the current branch is:
git fetch origin git log --oneline HEAD..origin/$(git branch --show-current)Report how many commits the remote is ahead. If the remote branch no longer exists, note that and continue with local conflict resolution.
Ask the user whether to rebase or merge to incorporate upstream changes, and explain the tradeoffs:
- Rebase (
git rebase origin/<branch>): rewrites your local commits on top of the upstream tip, producing a linear history. Best for feature branches that are not shared with others. Avoid rebasing branches that other people have checked out. - Merge (
git merge origin/<branch>): creates a merge commit that preserves the full history of both sides. Safer for shared or long-lived branches where rewriting history would disrupt collaborators.
Wait for the user's choice before proceeding.
- Rebase (
For each conflicted file identified in step 1: a. Use Read to display the file and locate the conflict markers (
<<<<<<<,=======,>>>>>>>). b. Explain to the user what each side of the conflict contains:- HEAD (your changes): the lines between
<<<<<<< HEADand=======. - Incoming (their changes): the lines between
=======and>>>>>>> <ref>. c. Ask the user which resolution to apply (keep yours, keep theirs, or combine), or propose a resolution if the intent is clear from context. d. Use Edit to apply the agreed resolution, removing all conflict markers so the file is valid.
- HEAD (your changes): the lines between
After all conflicted files are resolved, use Bash to stage only the resolved files by name (never
git add ., which would sweep untracked files like build output or.envinto the commit) and complete the rebase or merge:- If rebase was chosen:
If additional conflict rounds occur, repeat steps 4–5 for each round until the rebase completes.git add <resolved-file-1> <resolved-file-2> ... git rebase --continue - If merge was chosen:
git add <resolved-file-1> <resolved-file-2> ... git merge --continue
- If rebase was chosen:
Use Bash to confirm the branch is clean and ready to push:
git status git log --oneline -5Verify there are no remaining conflict markers and the working tree is clean. Remind the user:
- If rebase was used, a force-push is required:
git push --force-with-lease origin <branch>. Only do this if the branch is not shared. - If merge was used, a regular push is safe:
git push origin <branch>.
- If rebase was used, a force-push is required:
Action (f) — Manage Stashes
Use Bash to list all stashes:
git stash listIf the list is empty, inform the user and stop.
Show the stash list to the user and ask what they want to do:
"(i) Inspect a stash — show its diff (ii) Apply a stash — apply without dropping (iii) Pop a stash — apply and drop (iv) Drop a stash — delete without applying (v) Drop all stashes — clear the entire stash list (confirm first)"
Execute the chosen sub-action:
Sub-action (i) — Inspect a stash
Ask the user which stash number (N) to inspect. Then:
git stash show -p stash@{N}Display the diff and provide a plain-language summary of what changes are stashed (files changed, nature of changes).
Sub-action (ii) — Apply a stash
Ask the user which stash number (N) to apply. Then:
git stash apply stash@{N}After applying, check for conflicts:
git statusIf any conflicts are present (files show
both modifiedor similar), inform the user and run Action (e) to resolve them.Sub-action (iii) — Pop a stash
Ask the user which stash number (N) to pop. Then:
git stash pop stash@{N}After popping, check for conflicts the same way as sub-action (ii). If conflicts are found, run Action (e) to resolve them.
Sub-action (iv) — Drop a stash
Ask the user which stash number (N) to drop. Show the stash message and confirm:
"This will permanently delete stash@{N}:
<message>. Confirm? (y/n)"If confirmed:
git stash drop stash@{N}Sub-action (v) — Drop all stashes
Count the total number of stashes and confirm with the user:
"This will permanently delete ALL X stashes. This cannot be undone. Confirm? (y/n)"
If confirmed:
git stash clearAfter any sub-action completes, run
git stash listagain and show the user the updated stash state.
Git Workflow Reference
Branch Model
| Branch | Purpose | Rules |
|---|---|---|
main |
Production-ready history | Never commit directly. Only merge from release branches. |
release/<version> |
Integration branch per release | Never commit directly. All feature/fix PRs target this. |
feature/task-XXX-description |
New work | One per task. Created from the release branch. |
fix/task-XXX-description |
Bug fixes | One per issue. Created from the release branch. |
Flow
feature/* or fix/*
↓ (PR)
release/<version>
↓ (PR when release is ready)
main → annotated tag v<version>
Who Does What
| Action | Responsible |
|---|---|
| Create feature/fix branch | Planning or Dev agent |
| Open PR | Dev agent (the one that did the work) |
| Code review | Tech Review + Security agents |
| Approve PR | Tech Review + Security; Planning after triage |
| Merge to release | Planning or designated agent |
| Cut release (release → main + tag) | Planning or DevOps |
| Create changelog | Documentation agent |
Naming Conventions
- Feature branches:
feature/task-NNN-short-description - Fix branches:
fix/issue-NNN-short-description - Version tags:
vMAJOR.MINOR.PATCH(e.g.v1.0.0), always annotated (git tag -a) or signed (git tag -s) - Changelog:
docs/CHANGELOG.mdordocs/changelogs/<version>.md
Merge Style
Document the chosen merge style in docs/assumptions.md at project start. Default: merge commit (--no-ff) to preserve branch history.
Changelogs
The Documentation agent creates or updates changelogs in docs/ for each release. Format: version, date, sections for Added / Changed / Fixed / Security, links to PRs or handoff artifacts.
Output Format
After completing any action, confirm:
- What git operations were run (list commands with output).
- The current state of relevant branches.
- What the next step is.