ci-validation-gates

Validate CI/CD pipelines for semantic versioning, token security, and registry retry logic.

1|Updated Dec 23, 2025
One-click install
npx skills add https://github.com/jonnymuir/Umbraco.Prism --skill ci-validation-gates-jonnymuir
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ci-validation-gates
Source: https://github.com/jonnymuir/Umbraco.Prism/tree/main/.copilot/skills/ci-validation-gates
Command: npx skills add https://github.com/jonnymuir/Umbraco.Prism --skill ci-validation-gates-jonnymuir

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires npx, npm.

What problem does it solve?

This Skill prevents common CI/CD failures such as invalid versioning, authentication errors, and registry propagation issues that lead to broken releases and service outages.

Core Features & Use Cases

  • Semver Validation: Ensures all release versions strictly follow X.Y.Z formatting to prevent npm registry errors.
  • Deployment Guardrails: Enforces the use of Automation tokens and implements retry logic for eventual consistency in package registries.
  • Use Case: Use this Skill to audit your GitHub Actions workflows before a production release to ensure they are protected against draft release triggers and accidental version mutation.

Quick Start

Apply the ci-validation-gates skill to verify the current repository workflow configuration against the established defensive release patterns.

Frequently Asked Questions about ci-validation-gates

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate semantic versioning in GitHub Actions to prevent npm publish failures?▼

To validate semantic versioning in GitHub Actions, enforce strict X.Y.Z formatting checks on release versions before deployment. This prevents npm registry errors caused by malformed version strings during automated CI/CD workflows.

Why does my npm package deployment fail due to registry propagation delays?▼

npm package deployment fails due to registry propagation delays because of eventual consistency in package registries. Implementing retry logic in your CI/CD pipeline resolves this by automatically re-attempting verification until the published version is available.

Can I use this CI/CD validation approach without an Automation token?▼

You should not use this CI/CD validation approach without an Automation token. Deployment guardrails specifically enforce Automation tokens to secure authentication and prevent accidental version mutation or unauthorized package releases in GitHub Actions.

Do I need a specific shell environment to run these CI/CD defensive patterns?▼

You need a standard shell environment with access to npm and npx to run these CI/CD defensive patterns. The validation gates also require GitHub Actions context variables to properly audit automated release workflows.

What is the best way to protect a GitHub Actions release workflow from draft triggers?▼

The best way to protect a GitHub Actions release workflow from draft triggers is to apply defensive CI/CD patterns that audit workflow configurations. This prevents accidental deployments by validating token security and version formatting before production releases.