ci-validation-gates

Validate semver formats, token types, retry logic, and draft releases in CI/CD pipelines.

Updated Apr 14, 2026
One-click install
npx skills add https://github.com/robpitcher/eShopOnWeb --skill ci-validation-gates-robpitcher
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ci-validation-gates
Source: https://github.com/robpitcher/eShopOnWeb/tree/main/.copilot/skills/ci-validation-gates
Command: npx skills add https://github.com/robpitcher/eShopOnWeb --skill ci-validation-gates-robpitcher

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Defensive CI/CD patterns are codified to prevent invalid semver, improper tokens, missing retries, and undetected draft releases from triggering faulty deployments.

Core Features & Use Cases

  • Semver Validation Gate: enforces valid semantic versions before publishing.
  • NPM Token Type Verification: ensures automation tokens are used instead of user tokens requiring OTP.
  • Retry Logic for Propagation: waits for eventual consistency after publish with controlled retries.
  • Draft Release Detection: ensures workflows only proceed when releases are published.
  • Use Case: In a release pipeline, a failing semver validation stops the release early, saving time and preventing outages.

Quick Start

Add the ci-validation-gates steps to your CI workflow and trigger a test release to validate all gates before published.

Frequently Asked Questions about ci-validation-gates

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate semver formats in a CI workflow before publishing?

To validate semver formats in a CI workflow, you need a gate that parses and enforces semantic versioning rules before any publish step. This stops invalid releases early, saving pipeline time and preventing faulty deployments triggered by malformed versions.

How do I prevent CI pipelines from failing due to NPM token OTP requirements?

To prevent CI pipelines from failing due to NPM token OTP requirements, verify that your automation uses automation tokens instead of user tokens. Automation tokens bypass OTP needs, ensuring continuous, uninterrupted authentication during automated release workflows.

What is the best way to handle eventual consistency delays after a package publish?

The best way to handle eventual consistency delays after a package publish is to implement controlled retry logic in your pipeline. This gate waits for propagation to complete, ensuring downstream steps only proceed once the published package is fully available.

How do I stop a CI workflow from proceeding on a draft release?

To stop a CI workflow from proceeding on a draft release, implement draft release detection in your pipeline. This gate checks the release status and ensures workflows only continue when a release is officially published, preventing unseen draft deployments.

Do I need any external dependencies to enforce defensive CI checks for releases?

No, you do not need external dependencies to enforce defensive CI checks for releases. This skill operates independently with zero dependencies, providing built-in validation gates for semver, tokens, retries, and draft detection directly within your existing CI workflows.

Why does my automated release pipeline deploy faulty versions despite having tests?

Your automated release pipeline deploys faulty versions despite tests because missing defensive gates allow invalid semver or misconfigured tokens to pass through. Implementing validation checks for versions and token types prevents these invalid publishes early in the workflow.