devops-ci-cd

What problem does it solve?

This Skill addresses the complexities and potential pitfalls in setting up and managing DevOps and CI/CD pipelines, ensuring adherence to best practices for build, deployment, and security.

Core Features & Use Cases

• Build Once, Promote Always: Enforces a single build artifact that is promoted across environments.
• Secure Secrets Management: Mandates the use of secure secret storage (e.g., GitHub Secrets, OIDC) instead of plain text in configurations.
• Concurrency Control: Provides guidance on capping parallel jobs to manage resources and prevent race conditions.
• Image Tagging and Signing: Ensures container images are consistently tagged and cryptographically signed for integrity.
• Use Case: When configuring a new GitHub Actions workflow for a microservice, this Skill will ensure that secrets are handled securely and that the build process follows the 'build once' principle.

Quick Start

Configure a GitHub Actions workflow to build once and promote artifacts across environments, using secure secrets management and concurrency controls.