agentmods.dev

AKS-Lab-GitHubCopilot: Command for GitHub Copilot

.github/prompts/ship-it.prompt.md

ship-it is a command for GitHub Copilot from microsoft/AKS-Lab-GitHubCopilot. It costs 25 tokens per session (518 once invoked), scanned A, original, MIT.

A deployment workflow for packaging and releasing the current Git revision to Azure services. It checks the working tree, runs project checks, builds changed services, and verifies required Azure security settings before updating live workloads.

In plain words
What is it for?
Use it to ship ZavaShop services to Azure Container Registry, Azure Container Apps, and Azure Kubernetes Service after verifying the release conditions.
Why use it?
It replaces a sequence of manual release steps and blocks deployment when the source or required checks are not ready.

Command for GitHub Copilot ✓ vendor

Written for GitHub Copilot: a Copilot chat mode or prompt. Also seen: positional $N argument.

This is microsoft/AKS-Lab-GitHubCopilot's own configuration. It tells GitHub Copilot how to work on AKS-Lab-GitHubCopilot itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything AKS-Lab-GitHubCopilot configures →

not rated 10repo 8d ago A scan 25 tokens original MIT
View source ↗ microsoft/AKS-Lab-GitHubCopilot
About the project

ZavaShop on AKS and Azure Container Apps is a hands-on lab for delivering a multi-agent retail supply-chain application from requirements through deployment. It demonstrates a team of six GitHub Copilot custom coding agents working across specifications, application code, MCP servers, tests, infrastructure, and CI. The catalogue entries define the agents, skills, and instructions used in that workflow.

microsoft/AKS-Lab-GitHubCopilot · 10 stars · on GitHub

Reuse

Borrowing it

Nothing to install: this file belongs to microsoft/AKS-Lab-GitHubCopilot. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/microsoft/AKS-Lab-GitHubCopilot/main/.github/prompts/ship-it.prompt.md
Clone the repo
git clone --depth 1 https://github.com/microsoft/AKS-Lab-GitHubCopilot

Made for: GitHub Copilot.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for ship-it

README.md
[![agentmods](https://agentmods.dev/badge/commands/microsoft/aks-lab-githubcopilot/ship-it/github.svg)](https://agentmods.dev/commands/microsoft/aks-lab-githubcopilot/ship-it)
Your own site
<a href="https://agentmods.dev/commands/microsoft/aks-lab-githubcopilot/ship-it"><img src="https://agentmods.dev/badge/commands/microsoft/aks-lab-githubcopilot/ship-it/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for ship-it

Your own site · 80×15
<a href="https://agentmods.dev/commands/microsoft/aks-lab-githubcopilot/ship-it"><img src="https://agentmods.dev/badge/commands/microsoft/aks-lab-githubcopilot/ship-it.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 25 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 518 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00025 $0.00518
Opus 5.5 $0.00010 $0.00207
Sonnet 5.5 $0.00005 $0.00104
Haiku 4.5 $0.00003 $0.00052

Measured 1mo ago against content hash d42863dc73bc, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

ship-it scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.github/prompts/ship-it.prompt.md · 40 lines

What it actually says

Workflow: Ship It

Inputs

.env.lab sourced. kubectl and az already authenticated.

Steps (you run these via runCommands, do not just print them)

  1. Refuse if git status --porcelain is non-empty.
  2. uv run poe check. Refuse if red.
  3. Compute GIT_SHA=$(git rev-parse --short HEAD) and the changed-services list: 
    git diff --name-only origin/main... | awk -F/ '/^src\/(agents|mcp_servers)\//{print $3}' | sort -u
  4. If this is a first deployment or the changed-services list is empty but no live revisions exist, package the whole app: base image + all 9 services.
  5. Before changing live workloads, verify the Lab 01 landing zone baseline:
    • AKS aadProfile shows Microsoft Entra ID and Azure RBAC.
    • AKS Azure Policy add-on is enabled.
    • AKS Defender security monitoring is enabled.
    • Defender for Cloud Containers and KeyVaults pricing tiers are Standard.
    • Do not use az aks get-credentials --admin.
  6. For each changed service, build and push $ACR.azurecr.io/zavashop/<svc>:$GIT_SHA.
  7. For each changed specialist or MCP → az containerapp update --image ….
  8. If src/agents/orchestrator/ changed → helm upgrade --install zavashop infra/aks/helm/zavashop --set image.tag=$GIT_SHA … and kubectl rollout status.
  9. Smoke + evals against the public orchestrator IP.
  10. Report SHA, services updated, landing zone gate results, revisions, eval result.

Refuse to

  • Push if :latest appears in any built tag.
  • Update a workload whose image does not exist in ACR.
  • Continue if Entra ID, Azure RBAC, Azure Policy, or Defender checks fail, unless the user explicitly says the subscription is governed by equivalent central policy and provides the evidence.
  • Continue past a failed smoke test — instead, switch to deploy-engineer mode for triage.
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 40 lines · 25 tokens per session scan A d42863dc73bc

Subscribe to this mod's changes

ship-it is a command published in the GitHub repository microsoft/AKS-Lab-GitHubCopilot (10 stars, last pushed 8d ago), licensed MIT. It adds 25 tokens to every session and 518 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-19.

CloudDevOps and cloudGit and workflow
Related

ship-it compared with commands from other repositories

ship-it next to 6 commands from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
ship-itmicrosoft/AKS-Lab-GitHubCopilotCommand108d agoMITA25GitHub Copilot
ship-deploymentcomposio-community/awesome-claude-pluginsCommand2.0kyesterdaynoneA0Claude Code
frankx-ai-deployfrankxai/agentic-creator-osCommand12yesterdayApache-2.0A14Claude Code
spec-releaseHabib0x0/spec-driven-pluginCommand105d agoMITA13Claude Code
deployRamsbaby/jarvisCommand2016d agoMITA48Claude Code
publishreggiechan74/cc-pluginsCommand76d agoMITA10Claude Code
yecl-deploymentyecllsl/trae-agent-skillsCommand22d agoMITA0Claude Code