What problem does it solve? It keeps every infrastructure mutation on exactly one route — the CI pipeline — by holding GitHub Actions workflows, Terraform Cloud state, branching models, secrets standards, and the permission floor in one place, so no one runs terraform apply from a laptop or pushes directly to a protected branch. ## Core Features & Use Cases - Branching model selection: Picks between trunk-single-env and gitflow-multi-env and derives protection rules, environments, and deploy triggers from that choice. - Pipeline wiring: Configures OIDC-based AWS roles, the secrets naming standard, build/test and infra-plan workflows, the Claude Code GitHub App, and SonarCloud quality gates. - Versioning and releases: Automates numeric SemVer via bump-my-version with a loop guard, conventional-commit release notes, and per-repo trigger models. - Use Case: When wiring a new repo's pipeline, cutting a release, bumping SemVer, or debugging a red Sonar gate, invoke this Skill to get the exact workflow YAML, secret names, and permission rules to apply. ## Quick Start Ask the agent to wire the CI pipeline and branch protection for this repository using the devops conventions.
