What problem does it solve? Dockerfiles, Compose files, CI/CD workflows, and deploy pipelines often ship with reproducibility holes, leaked secrets, and irreversible release steps. This Skill provides a delivery-surface reference for authoring and reviewing that infrastructure code against house conventions for .NET, Angular, and SQL projects. ## Core Features & Use Cases - Docker conventions: Multi-stage builds, cache-ordered layers, digest-pinned base images, BuildKit secret mounts, non-root users, and runtime hardening (cap_drop, no-new-privileges, PID/memory/CPU caps) detailed in references/docker-hardening.md. - Compose and GitHub Actions rules: Health-gated service dependencies, internal network segmentation, SHA-pinned actions, OIDC federation, lockfile-keyed caches, secret scanning, and concurrency groups. - Safe deploys: Immutable artifact promotion, gated expand-contract migrations, health-gated blue-green cutover, and runtime secret stores. - Use Case: When reviewing a pull request that adds a Dockerfile and a GitHub Actions workflow, load this Skill to check layer ordering, image pinning, action SHA pinning, and secret handling, then prove the change with docker build, a workflow linter, and a secret scan. ## Quick Start Review this Dockerfile and GitHub Actions workflow using the devops skill and report any violations of the container, CI, and deploy rules.
