How does this skill improve CI/CD security?

It implements Workload Identity Federation to eliminate the need for long-lived service account keys, reducing the risk of credential leakage in your repositories.

Does it include automated testing stages?

Yes, the patterns include dedicated stages for linting, unit testing, and integration testing before the build and deployment phases.

What is the recommended way to handle secrets?

The skill follows best practices by recommending the use of Google Secret Manager and Least-Privilege service accounts instead of environment variables.

Which CI/CD platforms are supported?

The skill provides specific patterns and configuration templates for both GitHub Actions and Google Cloud Build.

Can I use this for Google Cloud Run deployments?

Yes, the skill includes specific workflow steps for building, scanning, and deploying containerized applications directly to Cloud Run.

GCP CI/CD Patterns

Name: GCP CI/CD Patterns
Author: Agentient

byAgentient

0•

デプロイメントとDevOps

Implements secure, standardized CI/CD pipelines using GitHub Actions and Google Cloud Build with industry-standard deployment patterns.

This skill provides production-ready templates and architectural guidance for establishing robust CI/CD workflows on Google Cloud Platform. It automates the transition from code quality checks and security scanning to containerized builds and secure deployments using Workload Identity Federation. By following standardized stages—including linting, testing, image scanning, and manual production approvals—it ensures a reliable delivery process while eliminating common anti-patterns like hardcoded service account keys and unauthorized direct pushes to production.

主な機能

01Standardized pipeline architecture from linting to production deployment

020 GitHub stars

03Automated GitHub Actions workflows with Workload Identity Federation

04Multi-stage Cloud Build pipeline templates for containerized applications

05Integrated security scanning for source code and container images

06Implementation of least-privilege service account best practices

ユースケース

01Transitioning from static service account keys to OIDC-based authentication

02Setting up a secure automated deployment pipeline for a Cloud Run service

03Implementing a multi-environment deployment strategy with required approvals

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add agentient/vibekit cicd-patterns

For use in Claude.ai and ChatGPT