ci-validation-gates

Enforce semver validation, token checks, retry logic, and draft-release detection in CI/CD workflows.

Updated Mar 27, 2026
One-click install
npx skills add https://github.com/lbouriez/Squad-Templates --skill ci-validation-gates-lbouriez
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ci-validation-gates
Source: https://github.com/lbouriez/Squad-Templates/tree/main/Nectari-Devops-Squad/.copilot/skills/ci-validation-gates
Command: npx skills add https://github.com/lbouriez/Squad-Templates --skill ci-validation-gates-lbouriez

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

CI/CD pipelines often fail due to invalid semver, improper token types, missing retry logic, and undetected draft releases. This skill centralizes defensive patterns to prevent outages and fragile deployments.

Core Features & Use Cases

  • Semver Validation Gate: enforce 3-part semver (or approved prereleases) before publish.
  • NPM Token Verification: require automation tokens, not user tokens with OTP, for publish steps.
  • Retry Logic for Propagation: implement retries to account for eventual consistency in package registries.
  • Draft Release Detection: ensure workflows trigger only on published releases, not drafts.

Quick Start

Apply these defensive CI/CD patterns in your workflows to validate versions, verify tokens, retry propagation, and detect draft releases before publishing.

Frequently Asked Questions about ci-validation-gates

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce semver validation in CI/CD pipelines before publishing?▼

Enforce semver validation in CI/CD by applying a validation gate that checks for 3-part semantic versions or approved prereleases before any publish step. This prevents deployments triggered by invalid version tags.

Why does my GitHub Actions workflow trigger on draft releases?▼

GitHub Actions workflows trigger on draft releases when missing draft-release detection allows unpublished events to propagate. Implementing draft release detection guardrails ensures workflows trigger only on published releases.

How do I verify NPM automation tokens instead of user tokens in release automation?▼

Verify NPM automation tokens in release automation by adding a token integrity check that requires automation tokens rather than user tokens with OTP. This ensures CI/CD publish steps authenticate non-interactively without OTP prompts.

Do I need retry logic for package registry propagation in CI/CD workflows?▼

You need retry logic for package registry propagation in CI/CD workflows to account for eventual consistency in package registries. Implementing retries ensures downstream deployment steps succeed after package availability delays.

Can I integrate defensive CI/CD patterns into existing GitHub Actions pipelines?▼

You can integrate these defensive CI/CD patterns into existing GitHub Actions pipelines because the patterns feature modular structure and explicit frontmatter metadata. This allows easily auditable validation gates to drop into current workflows.