ci-cd-and-automation
Build Reliable CI/CD Pipelines
Teams need repeatable checks and controlled releases to reduce broken builds and deployment risk. This skill provides practical pipeline, testing, rollout, secret, and rollback guidance.
使用我的智能体安装
将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。
Review the Skillstore skill "ci-cd-and-automation" from https://skillstore.io/skills/addyosmani-ci-cd-and-automation.md and its manifest at https://skillstore.io/api/skills/addyosmani-ci-cd-and-automation/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.你的智能体仍应展示其计划，并按安全策略请求必要确认。
Agent 可读资源
当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。
测试它
正在使用“ci-cd-and-automation”。 A Node.js team wants every pull request to pass standard quality checks before merge.
预期结果:
A workflow plan with dependency installation, linting, type checking, unit tests with coverage, a production build, a high-severity dependency audit, and required status checks.
正在使用“ci-cd-and-automation”。 An application needs database integration tests without exposing production credentials.
预期结果:
- Start an isolated PostgreSQL service in the CI runner.
- Use a dedicated CI secret for the test password.
- Run migrations before integration tests.
- Keep production credentials outside the CI environment.
正在使用“ci-cd-and-automation”。 A pipeline takes more than ten minutes and repeats the same dependency work.
预期结果:
An optimization sequence that enables dependency caching, splits independent checks into parallel jobs, filters jobs by changed paths, and measures each change against required gates.
安全审计
安全All 36 static findings describe commands, secret placeholders, environment-file guidance, or warning text inside SKILL.md examples. They are false positives for direct malware behavior because the skill contains documentation and configuration templates, not executable code or unauthorized data access. No additional semantic security finding was identified.
风险因素
⚙️ 外部命令 (28)
🔑 环境变量 (3)
分享与引用此报告
分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。
复制报告链接
https://skillstore.io/skills/addyosmani-ci-cd-and-automation/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/addyosmani-ci-cd-and-automation?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/addyosmani-ci-cd-and-automation?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/addyosmani-ci-cd-and-automation/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/addyosmani-ci-cd-and-automation.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学术引用 (APA · BibTeX · CFF)
APA 引用
addyosmani. (2026). ci-cd-and-automation security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/addyosmani-ci-cd-and-automation/audits/1BibTeX 引用
@techreport{addyosmani-addyosmani-ci-cd-and-automation-2026,
author = {addyosmani},
title = {ci-cd-and-automation security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/addyosmani-ci-cd-and-automation/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "ci-cd-and-automation security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "addyosmani"
date-released: "2026-09-19"
url: "https://skillstore.io/skills/addyosmani-ci-cd-and-automation/audits/1"
identifiers:
- type: other
value: "skillstore:addyosmani-ci-cd-and-automation:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 评分
评分依据 证据置信度: 中你能构建什么
Set Up Project CI
Create a pull request and main-branch pipeline with quality gates for linting, types, tests, builds, and dependency audits.
Improve Release Safety
Plan preview environments, feature flags, staged production rollouts, monitoring windows, and reliable rollback procedures.
Speed Up Slow Builds
Diagnose long CI runs and apply caching, parallel jobs, path filters, matrix testing, or targeted test optimization.
试试这些提示
Design a GitHub Actions CI workflow for my Node.js project. Include install, lint, type checking, tests, build, and security audit steps. Ask for missing project details first.
Extend my CI workflow with a temporary PostgreSQL service and integration tests. Use protected CI secrets, avoid production credentials, and list the project-specific values I must configure.
Create a release workflow using preview deployments, feature flags, staged rollout approval, monitoring, and rollback. Identify permission boundaries and secret-handling risks.
Review this CI timing summary and propose an implementation plan using caching, parallel jobs, path filters, matrix builds, and test optimization. Preserve required quality gates and explain tradeoffs.
最佳实践
- Keep lint, type, test, build, and security checks required before merge.
- Use separate least-privilege CI credentials and store secrets in the platform secret manager.
- Make deployments reversible with staged verification, monitoring, and a tested rollback path.
避免
- Disabling tests or weakening required checks to make a pipeline pass.
- Using production credentials in CI or committing real secrets to environment files.
- Deploying directly to production without staging verification, monitoring, or rollback.
常见问题
What projects does this skill support?
Does this skill execute my pipeline?
How should CI credentials be managed?
When should I use feature flags?
How can I reduce CI duration?
What should every deployment rollback plan include?
开发者详情
作者
addyosmani许可证
MIT
Skillstore 修订
r1
版本提示
作者未声明版本。
引用
5d5054f8a23586f9b500fece1cb613a9dffc787b
维护新鲜度
2026/9/19
使用量
0 次下载 · 0 次浏览
文件结构
📄 SKILL.md