CI/CD Automation
Purpose
You design delivery pipelines that are deterministic, observable, secure, and reversible. A good pipeline makes the release path boring in the best possible way.
Operational context
- Read
references/workflow.md.
- Identify CI/CD platform, branch strategy, environments, artifact registry, secrets model, deployment target, quality gates, and rollback requirements.
- Verify current platform syntax, reusable workflow behavior, cache semantics, auth integrations, and deploy strategy documentation.
Safe change sequence
- Map source to build, test, scan, package, deploy, smoke-test, and rollback.
- Define what blocks release and what only reports.
- Choose release pattern: rolling, blue/green, canary, feature flags, manual approval, or protected environment.
- Implement pipeline files with pinned versions, scoped permissions, safe caching, concurrency, and environment-specific secrets.
- Validate with platform lint, dry-run where available, PR/MR run, artifact reproducibility, and rollback rehearsal.
Safety rules
- Use Context7 MCP for current cloud, Kubernetes, IaC, CI/CD, container, observability, security, network, API, CLI, provider, and configuration documentation whenever the task depends on external technology behavior.
Change record
Provide pipeline model, documentation validation status, YAML/scripts, secrets/auth notes, validation steps, rollback path, and assumptions.
Verification
- Do not publish artifacts before required gates pass.
- Do not mix build and deploy identities without a reason.
- Prefer OIDC or short-lived auth over static secrets.
- Pin actions/images/tools in production pipelines.
- Keep logs useful without leaking secrets.
Handoff
For container image work, pair with container-platforms. For cloud deploy targets, add cloud-operations. For Kubernetes deploys, add kubernetes-operations. For pipeline secrets, add security-secrets.
References
references/workflow.md for CI/CD structure, release patterns, and validation checklist.
1---2name: cicd-automation3description: Use for CI/CD, pipeline automation, GitHub Actions, GitLab CI, Jenkins, Argo, Azure DevOps, build-test-scan-package-deploy flows, release orchestration, protected environments, approvals, and rollback.4---56# CI/CD Automation78## Purpose910You design delivery pipelines that are deterministic, observable, secure, and reversible. A good pipeline makes the release path boring in the best possible way.1112## Operational context13141. Read `references/workflow.md`.152. Identify CI/CD platform, branch strategy, environments, artifact registry, secrets model, deployment target, quality gates, and rollback requirements.163. Verify current platform syntax, reusable workflow behavior, cache semantics, auth integrations, and deploy strategy documentation.1718## Safe change sequence19201. Map source to build, test, scan, package, deploy, smoke-test, and rollback.212. Define what blocks release and what only reports.223. Choose release pattern: rolling, blue/green, canary, feature flags, manual approval, or protected environment.234. Implement pipeline files with pinned versions, scoped permissions, safe caching, concurrency, and environment-specific secrets.245. Validate with platform lint, dry-run where available, PR/MR run, artifact reproducibility, and rollback rehearsal.2526## Safety rules2728- Use Context7 MCP for current cloud, Kubernetes, IaC, CI/CD, container, observability, security, network, API, CLI, provider, and configuration documentation whenever the task depends on external technology behavior.2930## Change record3132Provide pipeline model, documentation validation status, YAML/scripts, secrets/auth notes, validation steps, rollback path, and assumptions.3334## Verification3536- Do not publish artifacts before required gates pass.37- Do not mix build and deploy identities without a reason.38- Prefer OIDC or short-lived auth over static secrets.39- Pin actions/images/tools in production pipelines.40- Keep logs useful without leaking secrets.4142## Handoff4344For container image work, pair with `container-platforms`. For cloud deploy targets, add `cloud-operations`. For Kubernetes deploys, add `kubernetes-operations`. For pipeline secrets, add `security-secrets`.4546## References4748- `references/workflow.md` for CI/CD structure, release patterns, and validation checklist.
ashermahonin