ci-validation-gates

Validate CI/CD pipelines for semantic versioning, token security, and registry retry logic.

1|Updated Dec 23, 2025
One-click install
npx skills add https://github.com/jonnymuir/Umbraco.Prism --skill ci-validation-gates-jonnymuir
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ci-validation-gates
Source: https://github.com/jonnymuir/Umbraco.Prism/tree/main/.copilot/skills/ci-validation-gates
Command: npx skills add https://github.com/jonnymuir/Umbraco.Prism --skill ci-validation-gates-jonnymuir

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires npx, npm.

What problem does it solve?

This Skill prevents common CI/CD failures such as invalid versioning, authentication errors, and registry propagation issues that lead to broken releases and service outages.

Core Features & Use Cases

  • Semver Validation: Ensures all release versions strictly follow X.Y.Z formatting to prevent npm registry errors.
  • Deployment Guardrails: Enforces the use of Automation tokens and implements retry logic for eventual consistency in package registries.
  • Use Case: Use this Skill to audit your GitHub Actions workflows before a production release to ensure they are protected against draft release triggers and accidental version mutation.

Quick Start

Apply the ci-validation-gates skill to verify the current repository workflow configuration against the established defensive release patterns.

Frequently Asked Questions about ci-validation-gates

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate semantic versioning in GitHub Actions to prevent npm publish failures?

To validate semantic versioning in GitHub Actions, enforce strict X.Y.Z formatting checks on release versions before deployment. This prevents npm registry errors caused by malformed version strings during automated CI/CD workflows.

Why does my npm package deployment fail due to registry propagation delays?

npm package deployment fails due to registry propagation delays because of eventual consistency in package registries. Implementing retry logic in your CI/CD pipeline resolves this by automatically re-attempting verification until the published version is available.

Can I use this CI/CD validation approach without an Automation token?

You should not use this CI/CD validation approach without an Automation token. Deployment guardrails specifically enforce Automation tokens to secure authentication and prevent accidental version mutation or unauthorized package releases in GitHub Actions.

Do I need a specific shell environment to run these CI/CD defensive patterns?

You need a standard shell environment with access to npm and npx to run these CI/CD defensive patterns. The validation gates also require GitHub Actions context variables to properly audit automated release workflows.

What is the best way to protect a GitHub Actions release workflow from draft triggers?

The best way to protect a GitHub Actions release workflow from draft triggers is to apply defensive CI/CD patterns that audit workflow configurations. This prevents accidental deployments by validating token security and version formatting before production releases.