What is action pinning and why is it used?

Action pinning replaces version tags (like @v4) with specific commit SHAs. This ensures your workflows are immutable and protects against supply chain attacks where a tag might be moved to malicious code.

Does this skill support Python project management?

Yes, it includes specific patterns for Python projects using 'uv' for dependency management and 'mise' for task execution and tool versioning.

Can I use Claude for automated code reviews with this skill?

Yes, it provides patterns for setting up 'claude_review.yaml' which triggers automated AI reviews on pull requests to check for quality, security, and performance.

How does this skill handle AWS credentials?

This skill promotes the use of AWS OIDC (OpenID Connect), which allows GitHub Actions to authenticate with AWS using short-lived tokens instead of storing long-lived IAM access keys.

Uptick CI/CD & Security Patterns

Name: Uptick CI/CD & Security Patterns
Author: uptick

byuptick

Deployment & DevOps

Implements security-first GitHub Actions workflows using action pinning, AWS OIDC, and Uptick's reusable CI patterns.

About

The Uptick CI Patterns skill enables Claude to configure robust, secure-by-default CI/CD pipelines following Uptick's internal best practices. It specializes in pinning GitHub Actions with Ratchet for immutability, implementing AWS OIDC for passwordless authentication, and deploying via Tickforge. This skill is essential for teams looking to standardize their DevOps workflows, automate pull request reviews with AI, and maintain high security standards across their GitHub repositories without relying on third-party action vulnerabilities.

Key Features

Native support for Tickforge deployment orchestration and app bumping
Standardized reusable workflows for CI, Docker, and Python (uv/mise)
Action pinning with Ratchet for SHA-based workflow immutability
Automated AI-powered code reviews and interactive Claude mentions
0 GitHub stars
Secure AWS OIDC authentication to eliminate long-lived credentials

Use Cases

Setting up a new Python project with uv, mise, and secure CI workflows
Hardening existing GitHub Actions by pinning external dependencies to specific SHAs
Configuring automated Claude-powered code reviews for repository pull requests

About

Key Features

Native support for Tickforge deployment orchestration and app bumping
Standardized reusable workflows for CI, Docker, and Python (uv/mise)
Action pinning with Ratchet for SHA-based workflow immutability
Automated AI-powered code reviews and interactive Claude mentions
0 GitHub stars
Secure AWS OIDC authentication to eliminate long-lived credentials

Use Cases

Setting up a new Python project with uv, mise, and secure CI workflows
Hardening existing GitHub Actions by pinning external dependencies to specific SHAs
Configuring automated Claude-powered code reviews for repository pull requests