review-ci

Auditing GitHub Actions workflows involves validating CI steps, least-privilege permissions, and trigger strategies against best practices. This ensures reproducibility, security, and performance by identifying missing caching and deployment token risks.

Slow Turborepo CI pipelines often lack efficient caching strategies. Identifying and implementing missing caching opportunities for pnpm and Turborepo accelerates build times and optimizes overall pipeline performance.

Yes, you can check for frozen lockfile requirements in monorepos. The task validates adherence to frozen lockfile rules, targeting monorepo build pipelines and dependency management to prevent drift and ensure reproducible builds.

Securing deployment tokens in CI configurations requires applying least-privilege permissions to workflow triggers and steps. Validating proper security scoping ensures deployment automation tasks do not expose tokens unnecessarily.

Yes, this approach works with pnpm and GitHub Actions caching. It analyzes CI configurations to identify missing caching opportunities for pnpm and Turborepo, ensuring efficient caching strategies accelerate build times.