ci-validation-gates

Enforce semver validation, token type checks, and retry logic in CI/CD releases.

413|64|Updated Feb 7, 2023
One-click install
npx skills add https://github.com/christianhelle/refitter --skill ci-validation-gates-christianhelle
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ci-validation-gates
Source: https://github.com/christianhelle/refitter/tree/main/.copilot/skills/ci-validation-gates
Command: npx skills add https://github.com/christianhelle/refitter --skill ci-validation-gates-christianhelle

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

CI environments often publish broken or insecure releases due to missing validation and misconfigured tokens. This Skill provides defensive patterns to enforce proper versioning, token types, retry propagation, and draft-release checks.

Core Features & Use Cases

  • Semver validation gate to reject invalid version formats before publishing.
  • NPM token type verification to ensure automation tokens are used for releases.
  • Retry logic to handle eventual consistency in package registries after publish.
  • Draft release detection to ensure workflows only proceed on published releases.
  • Build script protection guidelines to fence unsafe mutations during release.
  • Anti-pattern awareness and failure-mode guidance to prevent common release outages.

Quick Start

Configure your CI pipelines to enforce semver validation, token type checks, and retry logic for releases.

Frequently Asked Questions about ci-validation-gates

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce semver validation in CI/CD pipelines to prevent invalid releases?

Semver validation gates reject invalid version formats before publishing by enforcing semantic versioning rules in CI/CD pipelines. Configure your build workflows to validate version tags early, halting the pipeline immediately if the format is incorrect.

How do I handle package registry propagation delays after publishing in CI?

Retry logic handles eventual consistency in package registries by automatically rechecking propagation status after publish. Implement retry mechanisms in your release workflows to verify package availability before proceeding to downstream deployment steps.

Why should CI/CD pipelines verify NPM token types for releases?

Verifying NPM token types ensures automation tokens are used for releases instead of manual publish tokens. This prevents unauthorized or accidental manual overrides, securing the automated release workflow against misconfigured authentication credentials.

What are common CI/CD anti-patterns that cause release outages?

Common CI/CD anti-patterns include skipping draft-release detection, omitting token type checks, ignoring post-publish propagation delays, and allowing unsafe build script mutations. These missing validation gates lead to broken or insecure published releases.

How do I prevent workflows from running on unpublished draft releases?

Draft release detection ensures workflows only proceed on published releases by checking the release state before executing downstream tasks. Implement detection checks to halt pipelines if the current release is still marked as a draft.