ci-setup

Automate CI/CD pipeline setup with GitHub Actions, TruffleHog, and Dependabot.

9|1|Updated Feb 28, 2026
One-click install
npx skills add https://github.com/Roxabi/roxabi-plugins --skill ci-setup-roxabi
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ci-setup
Source: https://github.com/Roxabi/roxabi-plugins/tree/main/plugins/dev-core/skills/ci-setup
Command: npx skills add https://github.com/Roxabi/roxabi-plugins --skill ci-setup-roxabi

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill streamlines the setup of essential development infrastructure, including CI/CD pipelines, secret scanning, dependency management, and local development hooks, ensuring a consistent and secure development environment across projects.

Core Features & Use Cases

  • GitHub Actions Configuration: Automatically sets up CI/CD workflows (ci.yml, auto-merge.yml, etc.) based on project stack.
  • Security Enhancements: Integrates TruffleHog for secret scanning and Dependabot for dependency updates.
  • Local Development Hooks: Configures pre-commit hooks (e.g., linting, type checking, license compliance) using tools like lefthook or pre-commit.
  • Use Case: When starting a new project, run /ci-setup to automatically configure GitHub Actions, add TruffleHog to scan for secrets on commit, set up Dependabot for security updates, and install pre-commit hooks to ensure code quality before pushing.

Quick Start

Run the ci-setup skill to configure CI/CD, security scanning, and pre-commit hooks for the current project.

Frequently Asked Questions about ci-setup

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate GitHub Actions CI/CD pipeline setup for a new project?

Automating GitHub Actions CI/CD setup involves generating workflow files like `ci.yml` and `auto-merge.yml` based on your project stack. This Skill configures those pipelines automatically, ensuring consistent continuous integration and deployment infrastructure across projects.

What is the best way to configure pre-commit hooks for linting and type checking?

The best way to configure pre-commit hooks for linting and type checking is using tools like lefthook or pre-commit. This Skill sets up these local development hooks automatically to enforce code quality and license compliance before pushing.

How do I add TruffleHog secret scanning and Dependabot to my development environment?

Adding TruffleHog secret scanning and Dependabot to your development environment secures your codebase by detecting committed secrets and managing dependency updates. This Skill integrates both tools directly into your GitHub Actions workflows.

Can I use stack.yml to adapt CI/CD configuration to my project stack?

Yes, you can use `stack.yml` to adapt CI/CD configuration to your project stack. This Skill reads your project stack definitions in `stack.yml` to automatically generate adaptive GitHub Actions workflows and local development hook configurations.

Does this CI/CD setup require manual configuration of security updates and dependency management?

No, this CI/CD setup does not require manual configuration for security updates. It integrates Dependabot to automatically manage dependency updates and security patches, while TruffleHog handles secret scanning within your GitHub Actions pipelines.