How does this skill improve CI/CD security?

It implements Workload Identity Federation to eliminate the need for long-lived service account keys, reducing the risk of credential leakage in your repositories.

Does it include automated testing stages?

Yes, the patterns include dedicated stages for linting, unit testing, and integration testing before the build and deployment phases.

What is the recommended way to handle secrets?

The skill follows best practices by recommending the use of Google Secret Manager and Least-Privilege service accounts instead of environment variables.

Which CI/CD platforms are supported?

The skill provides specific patterns and configuration templates for both GitHub Actions and Google Cloud Build.

Can I use this for Google Cloud Run deployments?

Yes, the skill includes specific workflow steps for building, scanning, and deploying containerized applications directly to Cloud Run.

GCP CI/CD Patterns

Name: GCP CI/CD Patterns
Author: Agentient

byAgentient

배포 및 DevOps

Implements secure, standardized CI/CD pipelines using GitHub Actions and Google Cloud Build with industry-standard deployment patterns.

소개

This skill provides production-ready templates and architectural guidance for establishing robust CI/CD workflows on Google Cloud Platform. It automates the transition from code quality checks and security scanning to containerized builds and secure deployments using Workload Identity Federation. By following standardized stages—including linting, testing, image scanning, and manual production approvals—it ensures a reliable delivery process while eliminating common anti-patterns like hardcoded service account keys and unauthorized direct pushes to production.

주요 기능

Standardized pipeline architecture from linting to production deployment
0 GitHub stars
Automated GitHub Actions workflows with Workload Identity Federation
Multi-stage Cloud Build pipeline templates for containerized applications
Integrated security scanning for source code and container images
Implementation of least-privilege service account best practices

사용 사례

Transitioning from static service account keys to OIDC-based authentication
Setting up a secure automated deployment pipeline for a Cloud Run service
Implementing a multi-environment deployment strategy with required approvals

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add agentient/vibekit cicd-patterns

For use in Claude.ai and ChatGPT

Download Skill

GitHub

소개