cicd-master

Review GitHub Actions workflows and deployment scripts for security and reliability.

1|Updated Dec 8, 2023
One-click install
npx skills add https://github.com/hydrosolutions/SAPPHIRE_Forecast_Tools --skill cicd-master
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: cicd-master
Source: https://github.com/hydrosolutions/SAPPHIRE_Forecast_Tools/tree/main/.claude/skills/cicd-master
Command: npx skills add https://github.com/hydrosolutions/SAPPHIRE_Forecast_Tools --skill cicd-master

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides advisory guidance to build robust, secure CI/CD pipelines for the SAPPHIRE project, focusing on GitHub Actions, deployment scripts, and server task scheduling.

Core Features & Use Cases

  • Review and improve pinned action versions, minimal permissions, and provenance checks.
  • Assess deployment scripts in bin/ and scheduling tasks on servers with cron/systemd.
  • Guidance for end-to-end pipeline hygiene, including error handling, logging, and rollback strategies.

Quick Start

Review and optimize existing GitHub Actions workflows and deployment scripts for security, reliability, and maintainability.

Frequently Asked Questions about cicd-master

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I secure GitHub Actions workflows with minimal permissions and pinned versions?

Securing GitHub Actions workflows involves pinning action versions to specific commit hashes, applying minimal permission scopes, and enforcing provenance checks. This Skill reviews your pipelines to enforce security hygiene and attestation standards.

What is the best way to automate deployment scripts and server task scheduling with Docker or systemd?

Automating deployment scripts and server task scheduling requires assessing scripts in bin/ and configuring scheduling with Docker, systemd, or cron. This Skill guides reliability, error handling, and rollback strategies across local and cloud environments.

Does this CI/CD advisor work with existing GitHub Actions pipelines and deployment scripts?

Yes, this CI/CD advisor works with existing GitHub Actions pipelines and deployment scripts. It assesses your current workflows, evaluates security hygiene, and guides improvements for reliability and maintainability.

How do I add provenance checks and attestation standards to GitHub Actions deployments?

Adding provenance checks and attestation standards to GitHub Actions deployments requires reviewing pinned action versions and minimal permissions. This Skill enforces these security hygiene practices within your CI/CD pipelines.

Why do my GitHub Actions workflows need rollback strategies and error handling guidance?

GitHub Actions workflows need rollback strategies and error handling guidance to maintain pipeline reliability during deployment failures. This Skill provides advisory guidance for end-to-end pipeline hygiene across local and cloud environments.

Can I review cron and systemd scheduling tasks for cloud deployment reliability?

Yes, you can review cron and systemd scheduling tasks for cloud deployment reliability. This Skill assesses server task scheduling and deployment scripts to guide error handling, logging, and rollback strategies.