Skip to content

Skills suchen.../

Agent Skill Search Engine

Suche

Suche
Kategorien
Berufe

About

About
Privacy
Terms

© 2026 Skills Pool. Alle Rechte vorbehalten.

Cicd Pipelines | Skills Pool

Skill-Datei

Cicd Pipelines

Build, test, and deploy pipelines for GitHub Actions, Azure DevOps, GitLab CI, or Jenkins. Use when creating CI/CD workflows, configuring deployment stages, container builds, artifact management, pipeline security, or automating infrastructure deployments.

nguyenhappy920 Sterne29.03.2026

Beruf
Kategorien: CI/CD

Skill-Inhalt

When to Use

Creating or modifying CI/CD pipeline definitions
Configuring build, test, scan, deploy stages
Container image builds and registry pushes
Pipeline security and secret management
Infrastructure deployment automation (Terraform in CI/CD)
Release management and approval workflows

Platform Selection

GitHub-hosted repos: GitHub Actions (preferred)
Azure DevOps org: Azure Pipelines
GitLab-hosted repos: GitLab CI
Multi-platform / legacy: Jenkins

Procedure

1. Pipeline Structure

Define stages: lint → build → test → scan → deploy-staging → approve →

Verwandte Skills

Schnellinstallation

Cicd Pipelines

npx skillvault add nguyenhappy92/nguyenhappy92-happy-agent-github-skills-cicd-pipelines-skill-md

Skill herunterladen Repository öffnen

Autor: nguyenhappy92
Sterne: 0
Aktualisiert: 29.03.2026
Beruf

Auf dieser Seite

deploy-prod

Use reusable workflows/templates to avoid duplication

Pin all action/image versions by SHA or exact version

Reference platform guides:

GitHub Actions
Azure DevOps
Pipeline Security

2. Authentication

Use OIDC / Workload Identity Federation — no long-lived secrets
Scope credentials to specific environments
Use environment-level secrets (not repository-level when possible)

3. Build & Test

Cache dependencies for faster builds
Run unit tests and integration tests
Generate and publish code coverage reports
Fail the pipeline on test failures

4. Security Scanning

SAST — static analysis (CodeQL, SonarQube, Semgrep)
SCA — dependency scanning (Dependabot, Snyk, Trivy)
Container scanning — image vulnerabilities (Trivy, Grype)
Secret scanning — detect leaked credentials
IaC scanning — Terraform/Bicep misconfigs (tfsec, Checkov, KICS)

5. Deployment

Use environment protection rules with required reviewers for production
Implement blue-green or canary deployment strategies
Include smoke tests post-deployment
Automatic rollback on health check failure

6. Pipeline Checklist

No secrets echoed in logs
All action/image versions pinned
OIDC / workload identity for cloud auth
Security scanning in pipeline
Environment protection rules on production
Branch protection with required reviews
Artifacts signed and stored securely
Pipeline timeout configured

02

Platform Selection

041. Pipeline Structure

052. Authentication

063. Build & Test

074. Security Scanning

085. Deployment

096. Pipeline Checklist

Softwareentwickler

Github

GitHub operations via `gh` CLI: issues, PRs, CI runs, code review, API queries. Use when: (1) checking PR status or CI, (2) creating/commenting on issues, (3) listing/filtering PRs or issues, (4) viewing run logs. NOT for: complex web UI interactions requiring manual browser flows (use browser tooling when available), bulk operations across many repos (script with gh api), or when gh auth is not configured.

Openclaw Parallels Smoke

End-to-end Parallels smoke, upgrade, and rerun workflow for OpenClaw across macOS, Windows, and Linux guests. Use when Codex needs to run, rerun, debug, or interpret VM-based install, onboarding, gateway smoke tests, latest-release-to-main upgrade checks, fresh snapshot retests, or optional Discord roundtrip verification under Parallels.

Update Screenshots

Download screenshot baselines from the latest CI run and commit them. Use when asked to update, accept, or refresh component screenshot baselines from CI, or after the screenshot-test GitHub Action reports differences. This skill should be run as a subagent.

microsoft184.0k

Azure Pipelines

Use when validating Azure DevOps pipeline changes for the VS Code build. Covers queueing builds, checking build status, viewing logs, and iterating on pipeline YAML changes without waiting for full CI runs.

microsoft184.0k

Deployment Patterns

部署工作流、CI/CD流水线模式、Docker容器化、健康检查、回滚策略以及Web应用程序的生产就绪检查清单。

Deployment Patterns

Deployment workflows, CI/CD pipeline patterns, Docker containerization, health checks, rollback strategies, and production readiness checklists for web applications. Use when setting up deployment infrastructure or planning releases.

Softwareentwickler