deployment-pipelines

What problem does it solve?

Infrastructure engineers and developers often struggle to design and validate GitHub Actions pipelines that are secure, auditable, and maintainable. This skill provides a structured approach to authoring and reviewing CI/CD workflows, enforcing least-privilege permissions, and eliminating long-lived credentials through OIDC federation.

Core Features & Use Cases

• Guidance for GitHub Actions workflows, reusable workflows, and composite actions to standardize CI/CD across repos.
• OIDC federation to AWS and GCP, with environment-scoped secrets and minimal permissions to reduce blast radius.
• Best-practices for caching, artifacts, and security hardening in pipelines; triggers on edits to workflows and action definitions.
• Use cases include reviewing existing pipelines for security deficiencies, designing new workflows for automated deployments, and auditing pipelines for compliance.

Quick Start

Describe your CI/CD scenario and let it guide you through secure GitHub Actions configuration.