Does it handle security checks for pipelines?

Yes, it audits secret management, job permissions, and checks if third-party actions are pinned to specific SHAs to prevent supply chain attacks.

Which platforms does this skill support?

It supports a wide range of platforms including GitHub Actions, GitLab CI, Jenkins, Azure Pipelines, and CircleCI.

Can it help reduce CI/CD runner costs?

Yes, it identifies opportunities for dependency caching and job parallelization to significantly reduce execution time and resource consumption.

Should I use this for Kubernetes or Terraform files?

While it handles deployment logic, it is recommended to use the specialized k8s-reviewer or terraform-reviewer skills for deep infrastructure-specific audits.

CI/CD Pipeline Reviewer

Name: CI/CD Pipeline Reviewer
Author: physics91

byphysics91

デプロイメントとDevOps

Optimizes and audits CI/CD pipelines for security, performance, and best practices across major DevOps platforms.

概要

The CI/CD Reviewer skill provides automated, deep-dive audits of continuous integration and delivery pipelines to ensure they are secure, efficient, and cost-effective. By analyzing files like GitHub Actions workflows, GitLab CI configurations, and Jenkinsfiles, it identifies bottlenecks in build times, security risks in secret handling, and missing optimization patterns like dependency caching. This skill is essential for DevOps engineers and developers looking to harden their deployment pipelines while maintaining high-speed delivery cycles through actionable, prioritized recommendations.

主な機能

Standardized reporting with severity-rated issues and remediation steps
Performance optimization through caching and job parallelization
Deployment strategy validation for Staging, Blue-Green, and Canary patterns
0 GitHub stars
Automated analysis of GitHub Actions, GitLab CI, and Jenkins pipelines
Security auditing for secret management and unpinned third-party actions

ユースケース

Auditing complex GitHub Actions workflows for security vulnerabilities and slow execution
Modernizing legacy Jenkins pipelines with current industry best practices
Optimizing GitLab CI pipelines to reduce runner costs through better caching

概要

主な機能

Standardized reporting with severity-rated issues and remediation steps
Performance optimization through caching and job parallelization
Deployment strategy validation for Staging, Blue-Green, and Canary patterns
0 GitHub stars
Automated analysis of GitHub Actions, GitLab CI, and Jenkins pipelines
Security auditing for secret management and unpinned third-party actions

ユースケース

Auditing complex GitHub Actions workflows for security vulnerabilities and slow execution
Modernizing legacy Jenkins pipelines with current industry best practices
Optimizing GitLab CI pipelines to reduce runner costs through better caching