14 tagged continuous integration, measured the same way as everything else here.
Browse within: ci-cd 11Code Generation 6build-automation 6
Skill Claude CodeCodex
Convert GitHub Actions workflows to Harmont pipelines. Use when the user has existing .github/workflows/ YAML files and wants to migrate their CI to Harmont. Reads each workflow, maps GHA concepts to Harmont equivalents, explains differences, and delegates to the write-pipeline skill for the actual pipeline creation.
Skill Claude CodeCodex
Use when writing or editing any docblock, doc comment, docstring, function/method/class header, or API doc — in any language, including when documenting existing code or code you just changed.
Skill Claude CodeCodex
Use when writing, adding, or running any Rust test in this workspace (unit tests, cargo test, integration tests under crates//tests/, or new test coverage). Enforces rstest over free-floating #[test], parametrized #[case] over duplicated test functions and hand-rolled loops, and this repo's clippy/tempfile/assertcmd…
Skill Claude CodeCodex
Checks the third-party security audit status of a skill published to a skills registry (skills.sh) across every cached surface, decides whether a failing finding is real or points at content already removed, and drives a stale badge to green unattended. Runs a real install to capture what users see, reads the…
Skill Claude CodeCodex
Scans a repo's GitHub Actions workflows for the ten critical CI/CD attack vectors — template injection, fork code executed with privileges (pwn requests), cache poisoning, impostor action SHAs, secrets dumps, GITHUBENV hijack, write-token untrusted triggers, credentials in caches/artifacts, unverified remote code…
Skill Claude CodeCodex
Diagnoses GitHub Actions failures and attributes CI time and cost using StarSling's sling CLI. Invoke this BEFORE using gh or fetching any logs whenever the user asks why a job or run failed, what made a run slow, about runner minutes or CI cost, asks to re-run or cancel a run, or pastes a GitHub Actions URL — sling…
Skill Claude CodeCodex
Gates Terraform and OpenTofu changes with bumper before they are applied — turns a plan into JSON, scans it for destructive, irreversible, or non-compliant changes, and blocks apply until issues are fixed and the plan is verified. Use when about to run terraform/tofu plan or apply, when writing or editing .tf files…
Skill Claude CodeCodex
Looks up authoritative security knowledge from the bumper Advisor — CVEs and other vulnerability advisories, malicious-package reputation, and Infrastructure-as-Code misconfiguration rules (Terraform, Kubernetes, Dockerfile, CloudFormation). Use when you need ground-truth detail on a vulnerability, whether a package…
Skill Claude CodeCodex
Triages vulnerable and malicious dependencies with bumper — scans lockfiles for known CVEs and known-malicious packages, pulls authoritative detail from the bumper Advisor, and picks a safe version before installing. Use when adding or upgrading a dependency, editing a lockfile (package-lock.json, yarn.lock…