Verified:GitHub

ci-cd

Review CI/CD pipeline configurations across GitHub Actions, GitLab, Forgejo, Gitea, and Woodpecker.

2|Updated Apr 6, 2026

Search Tags:#automation #devops #security #compliance #ci-cd #pipelines

One-click install

npx skills add https://github.com/iuliandita/skills --skill ci-cd-iuliandita

Or copy as Structured Prompt for Agent▼

Please help me install this Agent Skill.
Skill: ci-cd
Source: https://github.com/iuliandita/skills/tree/main/skills/ci-cd
Command: npx skills add https://github.com/iuliandita/skills --skill ci-cd-iuliandita

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the complexity and security risks inherent in managing CI/CD pipelines across multiple platforms, ensuring your infrastructure is auditable, secure, and compliant with PCI-DSS 4.0 standards.

Core Features & Use Cases

Multi-Platform Support: Expert guidance for GitHub Actions, GitLab CI/CD, Forgejo, Gitea, and Woodpecker.
Security Hardening: Automated checks for SHA pinning, secret management, and least-privilege permissions.
Compliance & Architecture: Design pipelines that meet PCI-DSS 4.0 requirements, including SBOM generation and gated production deployments.

Quick Start

Use the ci-cd skill to review my current GitHub Actions workflow for security vulnerabilities and suggest improvements based on the latest best practices.

Frequently Asked Questions about ci-cd

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I secure GitHub Actions workflows against supply chain attacks?▼

Secure GitHub Actions workflows by enforcing SHA pinning for third-party actions, applying least-privilege permissions, and automating secret management. This Skill reviews pipeline configurations and suggests structural gates to harden your CI/CD infrastructure against supply chain threats.

Can I use this to design GitLab CI/CD pipelines for PCI-DSS 4.0 compliance?▼

Yes, you can architect GitLab CI/CD pipelines for PCI-DSS 4.0 compliance. The Skill guides you in adding automated security scanning, SBOM generation, and gated production deployments to meet strict regulatory requirements.

What's the best way to review existing Woodpecker or Forgejo pipelines for security vulnerabilities?▼

Review Woodpecker and Forgejo pipelines by analyzing configurations against best practices for structural gates and automated security scanning. The Skill identifies vulnerabilities and enforces least-privilege permissions across your CI/CD definitions.

Does this Skill support CI/CD configuration across multiple platforms like Gitea and GitHub?▼

Yes, it supports CI/CD configuration across GitHub Actions, GitLab, Forgejo, Gitea, and Woodpecker. The Skill provides expert guidance to architect and review pipelines uniformly, ensuring fast, secure, and auditable infrastructure on any supported platform.

Why do I need SHA pinning in my CI/CD pipelines?▼

SHA pinning prevents unauthorized modifications to third-party actions by locking dependencies to a specific commit hash. The Skill enforces SHA pinning and automated security scanning to ensure your CI/CD pipelines remain secure and auditable.

How do I add automated security scanning and SBOM generation to production deployments?▼

Add automated security scanning and SBOM generation by architecting pipelines with structural gates and compliance checks. This Skill guides you in integrating these controls to secure production deployments and satisfy PCI-DSS 4.0 requirements.