What problem does it solve?
This Skill prevents fragile or insecure CI/CD pipelines by identifying gaps in workflow design, deployment safety, and cloud access patterns before changes reach production.
Core Features & Use Cases
- End-to-end pipeline review: Evaluates GitHub Actions workflows for job structure, caching, parallelization, and secret handling.
- Deployment strategy validation: Checks Lambda deployment approaches such as versions/aliases and rollout patterns like blue/green or canary.
- IaC and quality gate checks: Reviews Terraform usage in CI (plan vs apply, and state management) and confirms lint/test/scan/build gates.
- Safe AWS operations: Verifies rollback readiness via CodeDeploy + CloudWatch Alarm and enforces OIDC for AWS without long-lived credentials.
- Environment promotion consistency: Ensures repeatable promotion across dev → staging → prod.
Quick Start
Ask the AI to run a CI/CD pipeline review for all GitHub Actions workflows in .github/workflows/.