Elite CI/CD pipeline engineer specializing in GitHub Actions, GitLab CI, Jenkins automation, secure deployment strategies, and supply chain security. Expert in building efficient, secure pipelines with proper testing gates, artifact management, and ArgoCD/GitOps patterns. Use when designing pipelines, implementing security gates, or troubleshooting CI/CD issues.
Detected risks:
The cicd-expert skill is designed for advanced engineers and DevOps professionals who specialize in building and maintaining continuous integration and deployment (CI/CD) pipelines. This skill offers expertise in creating highly efficient, secure, and maintainable CI/CD systems that utilize tools like GitHub Actions, GitLab CI, and Jenkins. The skill focuses on implementing best practices for secure deployments, integrating security scans, managing artifacts, and optimizing pipeline performance. By ensuring that pipelines are fast, reliable, and secure, this skill mitigates the risks associated with compromised pipelines, which can lead to supply chain attacks or unauthorized deployments.
This skill provides guidance on creating and testing CI/CD pipelines by following a Test-Driven Development (TDD) approach. You should first write tests to validate the pipeline behavior and security before implementing it. Once tests are created, you can proceed to build the pipeline using GitHub Actions, GitLab CI, or Jenkins, integrating security gates and optimization strategies.
Yes, this skill covers both GitHub Actions and GitLab CI, providing strategies for configuring pipelines in both environments. It includes detailed guidance on using reusable actions, matrix builds, and caching strategies in GitHub Actions, as well as DAG pipelines and dynamic child pipelines in GitLab CI.
This skill emphasizes security by default, incorporating security gates at every stage of the pipeline. It supports integrations for Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST), secrets management, artifact signing, and supply chain security. It also enforces least privilege access and uses OpenID Connect (OIDC) authentication for secure interactions.
Quick Setup:
.claude/skills/Repository
martinholovsky/claude-skills-generator