Generate cub-scout compare source-truth evidence for Pilot CD pre-deploy gates.
npx skills add https://github.com/confighub/cub-scout --skill pilot-cd-gate
Please help me install this Agent Skill. Skill: pilot-cd-gate Source: https://github.com/confighub/cub-scout/tree/main/skills/pilot-cd-gate Command: npx skills add https://github.com/confighub/cub-scout --skill pilot-cd-gate
It helps you decide whether a release is safe to promote by turning cub-scout's structured, read-only Kubernetes/GitOps evidence into a clear pre-deploy gate outcome for Pilot, without cub-scout making any authority calls or PASS/BLOCK decisions itself.
Ask Pilot to gate the apply by running cub-scout compare source-truth <kind>/<name> -n <ns> with an explicit --strategy <s> and JSON output, then have Pilot use the evidence to decide PASS/WATCH/ASK/BLOCK.
High-intent search queries and answers about installing and using this skill.
You gate CD deploys by running cub-scout compare source-truth with an explicit strategy like git or helm, generating evidence that Pilot uses to render a PASS or BLOCK verdict for the deploy.
Source-truth strategy comparison validates Kubernetes live state against a declared GitOps strategy like Argo or Flux before promoting a release, ensuring conformance-based CD gating rather than guesswork.
Yes, you must provide a caller-declared strategy such as git, helm, kustomize, or oci with argo or flux variants so the gate performs conformance-based checks rather than guessing your deployment state.
You generate immutable audit receipts by using the optional receipt verify feature to create and save a fingerprinted in-toto receipt, providing attachable typed artifacts for CI gating and durable proof.
A CD gate reports incomplete evidence when source-truth checks find missing data, surfacing structured proof gaps and safe next actions so operators know exactly what to fix before proceeding.
cub-scout generates read-only structured evidence without making authority calls itself, allowing Pilot to consume the data and automatically block unsafe Kubernetes promotions based on strategy-anchored decisions.
confighubCompare live Kubernetes state against ConfigHub-governed intent across clusters.
confighubGenerate tamper-evident, fingerprinted Kubernetes verification receipts as in-toto Statements.
confighubAggregate cub-scout evidence into a fleet-wide PASS/WATCH/ASK/BLOCK conformance verdict.
confighubVerify post-deploy Kubernetes/GitOps releases against declared intent using cub-scout evidence.
