skills.rest
BMS-kmusial
BMS-kmusialCOMMUNITY
Explore all skills by this author →
GitHub

setup-cicd

Generate a GitHub Actions pipeline that validates and publishes packages to AWS CodeArtifact via OIDC.

Updated May 23, 2026
Search Tags:#devops#ci/cd#github actions#workflow generation#npm publish#oidc#aws codeartifact
One-click install
npx skills add https://github.com/BMS-kmusial/bms-stream-monitor --skill setup-cicd-bms-kmusial
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: setup-cicd
Source: https://github.com/BMS-kmusial/bms-stream-monitor/tree/main/.claude/skills/setup-cicd
Command: npx skills add https://github.com/BMS-kmusial/bms-stream-monitor --skill setup-cicd-bms-kmusial

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Setting up a secure CI/CD pipeline to publish an AI toolkit package to AWS CodeArtifact requires careful wiring of GitHub Actions, OIDC authentication, and package validation, which is error-prone when done manually. ## Core Features & Use Cases - Workflow Generation: Creates .github/workflows/ci.yml with a validation job and a publish job gated to the default branch. - OIDC-Based Security: Configures AWS authentication through aws-actions/configure-aws-credentials with id-token: write, avoiding long-lived access keys. - Package Validation: Checks pack.yaml fields, verifies every skills/*/SKILL.md has matching name and description frontmatter, and runs npm pack --dry-run. - Use Case: A team maintaining an AI toolkit monorepo needs every merge to main to automatically validate skill metadata and publish the package to their CodeArtifact repository without storing AWS credentials in GitHub. ## Quick Start Ask the assistant to generate the CI/CD workflow that validates the ai-toolkit package and publishes it to AWS CodeArtifact using OIDC.

Frequently Asked Questions about setup-cicd

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I publish an npm package to AWS CodeArtifact from GitHub Actions?▼

Create a workflow that configures AWS credentials with aws-actions/configure-aws-credentials@v4, runs aws codeartifact login to authenticate npm, and publishes from the package directory. The publish job should run only on pushes to the default branch.

How to authenticate GitHub Actions to AWS without access keys?▼

Use OIDC by granting the workflow id-token: write permission and assuming an IAM role through aws-actions/configure-aws-credentials. Store the role ARN in a GitHub secret such as AWS_ROLE_ARN instead of using AWS_ACCESS_KEY_ID or AWS_SECRET_ACCESS_KEY.

What should a CI validation job check before publishing a package?▼

The validation job should confirm pack.yaml exists with required fields, verify every skills/*/SKILL.md has name and description frontmatter matching its directory, and ensure npm pack --dry-run succeeds before any publish step runs.

Can the publish job run on pull requests?▼

No. The publish job must be restricted to pushes on the default branch only. Pull requests should trigger validation but never publish, preventing untested or unreviewed code from reaching the CodeArtifact repository.

Why does CodeArtifact login fail in GitHub Actions?▼

Login typically fails when the OIDC role trust policy does not allow the repository or branch, the AWS region or CodeArtifact domain is misconfigured, or the id-token: write permission is missing from the workflow.

Related Skills

Explore More Software Engineering Skills→
ValueMediaValueMedia

tf-registry

Generate Terraform scripts for AWS CodeArtifact npm registry setup.

Official
Intermediate
pr-pmpr-pm
121

npm-trusted-publishing

Configure GitHub Actions OIDC trusted publishing for npm packages.

Community
Intermediate
cartridge-ggcartridge-gg
80

release-prep

Automate release readiness checks for multi-package software repositories.

Official
Intermediate
ValueMediaValueMedia

setup-cicd

Generate GitHub Actions workflows for AWS CodeArtifact package publication with OIDC.

Official
Advanced