devops

Validate CI/CD configurations, Dockerfiles, and infrastructure-as-code scripts.

Updated Mar 12, 2026
One-click install
npx skills add https://github.com/ps-carvalho/spavn-agents --skill devops-ps-carvalho
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: devops
Source: https://github.com/ps-carvalho/spavn-agents/tree/main/.opencode/skills/devops
Command: npx skills add https://github.com/ps-carvalho/spavn-agents --skill devops-ps-carvalho

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates the validation and review of CI/CD pipelines, Docker configurations, and infrastructure-as-code, ensuring best practices and security.

Core Features & Use Cases

  • CI/CD Validation: Checks GitHub Actions workflows and other CI/CD configurations for errors and security vulnerabilities.
  • Docker Best Practices: Reviews Dockerfiles and docker-compose files for efficiency, security, and adherence to standards.
  • Infrastructure as Code (IaC) Review: Validates Terraform, Kubernetes, and other IaC configurations.
  • Use Case: After updating a Dockerfile, this Skill automatically reviews it for multi-stage builds, non-root users, and potential security flaws, providing a report before deployment.

Quick Start

Validate the Dockerfile in the current directory.

Frequently Asked Questions about devops

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate Dockerfiles for security and best practices before deployment?

To validate Dockerfiles for security, you need an automated review process that checks for multi-stage builds, non-root users, and potential vulnerabilities. This Skill analyzes Dockerfile patterns to ensure efficiency and adherence to security standards before deployment.

How do I check GitHub Actions workflows for security vulnerabilities?

Checking GitHub Actions workflows for security involves analyzing .github/workflows/* YML files for syntax errors and deployment strategy issues. This Skill validates CI/CD configurations against best practices to identify and report security vulnerabilities.

Can I review Terraform and Kubernetes infrastructure-as-code configurations?

Yes, you can review Terraform and Kubernetes infrastructure-as-code by analyzing infra/*, k8s/*, and terraform/* file patterns. The validation process checks syntax, structure, and security issues to ensure your IaC meets deployment standards.

What is the best way to automate CI/CD pipeline validation?

Automating CI/CD pipeline validation is best achieved by scanning deployment configurations and YML files against established security standards. This Skill automatically reviews your infrastructure-as-code and CI/CD setups for errors, providing a validation report.

Do I need a linked skill for comprehensive deployment automation review?

Yes, for a comprehensive deployment automation review, this Skill requires the linked 'deployment-automation' skill. It extends the validation of CI/CD pipelines, Docker configurations, and infrastructure-as-code beyond standard security and syntax checks.