What is action pinning and why is it used?

Action pinning replaces version tags (like @v4) with specific commit SHAs. This ensures your workflows are immutable and protects against supply chain attacks where a tag might be moved to malicious code.

Does this skill support Python project management?

Yes, it includes specific patterns for Python projects using 'uv' for dependency management and 'mise' for task execution and tool versioning.

Can I use Claude for automated code reviews with this skill?

Yes, it provides patterns for setting up 'claude_review.yaml' which triggers automated AI reviews on pull requests to check for quality, security, and performance.

How does this skill handle AWS credentials?

This skill promotes the use of AWS OIDC (OpenID Connect), which allows GitHub Actions to authenticate with AWS using short-lived tokens instead of storing long-lived IAM access keys.

Uptick CI/CD & Security Patterns

Name: Uptick CI/CD & Security Patterns
Author: uptick

byuptick

0•

デプロイメントとDevOps

Implements security-first GitHub Actions workflows using action pinning, AWS OIDC, and Uptick's reusable CI patterns.

The Uptick CI Patterns skill enables Claude to configure robust, secure-by-default CI/CD pipelines following Uptick's internal best practices. It specializes in pinning GitHub Actions with Ratchet for immutability, implementing AWS OIDC for passwordless authentication, and deploying via Tickforge. This skill is essential for teams looking to standardize their DevOps workflows, automate pull request reviews with AI, and maintain high security standards across their GitHub repositories without relying on third-party action vulnerabilities.

主な機能

01Native support for Tickforge deployment orchestration and app bumping

02Standardized reusable workflows for CI, Docker, and Python (uv/mise)

03Action pinning with Ratchet for SHA-based workflow immutability

04Automated AI-powered code reviews and interactive Claude mentions

050 GitHub stars

06Secure AWS OIDC authentication to eliminate long-lived credentials

ユースケース

01Setting up a new Python project with uv, mise, and secure CI workflows

02Hardening existing GitHub Actions by pinning external dependencies to specific SHAs

03Configuring automated Claude-powered code reviews for repository pull requests

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add uptick/claude-marketplace uptick-ci-patterns

For use in Claude.ai and ChatGPT

Download Skill