What problem does it solve?
Manually validating LENS release pipelines against complex PPE and Prod ring deployment standards is time-consuming and prone to human error, leading to non-compliant deployments that can cause production outages or security gaps.
Core Features & Use Cases
- 20-Point Compliance Audit: Evaluates pipelines against all mandatory and recommended standards from configuringPpeAndProdRings.md, including ring configuration, authentication, registration, and promotion rules.
- Scored Reporting: Generates tier-weighted compliance scores, gap lists with evidence, and step-by-step remediation guidance to resolve non-compliant configurations.
- Ev2 Integration: Discovers and validates Ev2 artifacts like stage maps, RolloutSpec, and configuration files, and outputs ready-to-use registration commands for Azure services.
- Use Case: A DevOps engineer preparing a LENS service release can run this audit to catch missing lockbox auth, incorrect stage map configurations, or missing registration parameters before deploying to production.
Quick Start
Use the pipeline-audit skill to audit your LENS release pipeline in the current working directory and receive a full compliance report with remediation steps for any gaps.