hims-devops-guardian

Validate Row-Level Security policies and database migration reversibility in healthcare CI/CD pipelines.

Updated Jan 3, 2026

Search Tags:#devops #ci/cd #supabase #healthcare compliance #rls validation #zero-downtime deployment

Ready to run

npx skills add https://github.com/CJCreator-New/care-harmony-hub --skill hims-devops-guardian

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: hims-devops-guardian
Source: https://github.com/CJCreator-New/care-harmony-hub/tree/main/.agents/skills/hims-devops-guardian
Command: npx skills add https://github.com/CJCreator-New/care-harmony-hub --skill hims-devops-guardian

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill addresses the critical need for robust DevOps practices and compliance in regulated healthcare software development, ensuring secure and reliable deployments of the CareSync system.

Core Features & Use Cases

CI/CD Pipeline Security: Enforces pre-commit, pull request, and pre-staging gates including security scans, RLS validation, and integration tests.
Environment Management: Guides on maintaining strict separation between development, staging, and production environments for secrets, databases, and configurations.
Zero-Downtime Deployments: Implements strategies like Blue-Green deployments and feature flag rollouts for safe, continuous delivery of updates.
Use Case: Ensure that all database RLS policies correctly scope patient data by hospital_id before any code is promoted to production, preventing unauthorized data access.

Quick Start

Review the CareSync CI/CD pipeline for any secrets accidentally committed to the repository.

Frequently Asked Questions about hims-devops-guardian

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I validate Supabase Row-Level Security policies for healthcare compliance in CI/CD?▼

Validate Supabase Row-Level Security (RLS) policies by enforcing pre-commit and pull request gates that verify patient data scoping by hospital_id before code promotion. This prevents unauthorized data access and ensures HIPAA compliance in regulated healthcare applications.

What is the best way to achieve zero-downtime deployment for React and PostgreSQL applications?▼

Zero-downtime deployment is achieved by implementing Blue-Green deployment strategies and feature flag rollouts. This allows safe, continuous delivery of updates to React and PostgreSQL environments without interrupting user access during the promotion process.

How do I maintain environment separation for HIPAA compliant applications across development, staging, and production?▼

Environment separation is maintained by strictly isolating secrets, databases, and configurations across development, staging, and production. This prevents cross-environment data leakage and ensures operational safety for HIPAA compliant applications.

Can I automate database migration reversibility checks in a Supabase CI/CD pipeline?▼

Yes, database migration reversibility is verified within the CI/CD pipeline during the pre-staging gate. Automating these checks ensures that any Supabase database schema changes can be safely rolled back if deployment issues arise in production.

What security scans should I run before promoting healthcare code to production?▼

Before promoting healthcare code to production, run security scans, RLS validation, and integration tests as pre-staging gates. These checks verify operational safety, ensure compliance, and prevent unauthorized access to patient data.