Can it detect security vulnerabilities?

Yes, it specifically checks for hardcoded secrets and ensures they are referenced from environment variables or secret managers.

What files does this skill monitor?

It monitors Dockerfiles, docker-compose.yml, Kubernetes manifests, Helm charts, and Terraform files for configuration issues.

Does it support rollback verification?

It confirms that a rollback strategy, such as canary weights or replica minimums, is explicitly defined in your deployment manifests.

How does it improve production stability?

By enforcing resource limits and health checks, it prevents deployments that could lead to resource exhaustion or silent failures in production.

Deployment Validation

Name: Deployment Validation
Author: LieBieS

byLieBieS

•

デプロイメントとDevOps

Ensures deployment readiness by validating infrastructure configurations, resource limits, and security best practices before production releases.

The Deployment Validation skill acts as a safeguard for your CI/CD pipeline, automatically scanning Kubernetes manifests, Helm charts, Terraform files, and Docker configurations before deployment. It identifies missing health checks, unconstrained resource limits, and hardcoded secrets while ensuring that deployment environments align with branch policies. By providing structured feedback on risks and actionable recommendations, it helps developers prevent failed releases and maintain infrastructure stability.

主な機能

01Policy checking for branch-to-environment alignment and rollback strategies

021 GitHub stars

03Automated validation of Kubernetes manifests, Helm charts, and Terraform scripts

04Detection of hardcoded secrets and verification of secure environment variable usage

05Enforcement of resource limits for CPU and memory to prevent cluster instability

06Verification of health check endpoints and liveness/readiness probes

ユースケース

01Security reviews of Infrastructure as Code (IaC) to prevent secret leakage

02Automated optimization of Dockerfiles and Compose files for resource management

03Pre-deployment auditing to catch configuration errors before they reach production

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add liebies/newt deployment-validation

For use in Claude.ai and ChatGPT