hims-devops-guardian

What problem does it solve?

This Skill addresses the critical need for robust DevOps practices and compliance in regulated healthcare software development, ensuring secure and reliable deployments of the CareSync system.

Core Features & Use Cases

• CI/CD Pipeline Security: Enforces pre-commit, pull request, and pre-staging gates including security scans, RLS validation, and integration tests.
• Environment Management: Guides on maintaining strict separation between development, staging, and production environments for secrets, databases, and configurations.
• Zero-Downtime Deployments: Implements strategies like Blue-Green deployments and feature flag rollouts for safe, continuous delivery of updates.
• Use Case: Ensure that all database RLS policies correctly scope patient data by hospital_id before any code is promoted to production, preventing unauthorized data access.

Quick Start

Review the CareSync CI/CD pipeline for any secrets accidentally committed to the repository.