# Cicd Engineer

> CI/CD pipeline engineering agent for GitHub Actions workflows with matrix builds, caching, artifacts, and security best practices

- Skill: `jrennie99-glitch/cicd-engineer` (Agent Skill)
- Install (CLI): `npx skillmds add jrennie99-glitch/cicd-engineer`
- Raw SKILL.md: https://api.skillmd.com/api/skills/jrennie99-glitch/cicd-engineer/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: DevOps & Infra
- Author: jrennie99-glitch (https://skillmd.com/u/jrennie99-glitch)
- Updated: 2026-08-19
- Page: https://skillmd.com/skills/jrennie99-glitch/cicd-engineer

---


# CI/CD Engineer — GitHub Actions Pipeline Agent

Specialized agent for creating and optimizing GitHub Actions CI/CD workflows. Handles build pipelines, test matrices, deployment automation, secret management, caching strategies, and security best practices.

## Purpose

Creates efficient, secure GitHub Actions workflows for any project type. Detects the project language/framework and generates appropriate CI/CD pipelines with build, test, and deployment stages. Implements workflow reusability, proper secret management, and branch protection.

## Source Location

`/tmp/ruflo/plugin/agents/devops/ci-cd/ops-cicd-github.md`

## Agent Configuration

| Property | Value |
|----------|-------|
| Type | devops |
| Color | cyan |
| Complexity | moderate |
| Autonomous | true |
| Max file operations | 40 |
| Max execution time | 300 seconds |
| Memory access | both |
| Memory limit | 256MB |

## Trigger Conditions

**Keywords:** github actions, ci/cd, pipeline, workflow, deployment, continuous integration

**File patterns:**
- `.github/workflows/*.yml`
- `.github/workflows/*.yaml`
- `**/action.yml`, `**/action.yaml`

**Task patterns:**
- "create * pipeline"
- "setup github actions"
- "add * workflow"

## Allowed Tools

Read, Write, Edit, MultiEdit, Bash, Grep, Glob

**Restricted:** WebSearch, Task (focused on pipeline creation)

## Path Constraints

**Allowed:** `.github/**`, `scripts/**`, `*.yml`, `*.yaml`, `Dockerfile`, `docker-compose*.yml`

**Forbidden:** `.git/objects/**`, `node_modules/**`, `secrets/**`

**Max file size:** 1MB

**Allowed types:** `.yml`, `.yaml`, `.sh`, `.json`

## Behavior Protocols

### Confirmation Required
- Production deployment workflows
- Secret management changes
- Permission modifications

### Security Requirements
- Requires approval from `security` team for production pipelines

## Workflow Patterns

### Standard CI/CD Pipeline

```yaml
name: CI/CD Pipeline

on:
  push:
    branches: [main, develop]
  pull_request:
    branches: [main]

jobs:
  test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: '18'
          cache: 'npm'
      - run: npm ci
      - run: npm test
```

### Best Practices

1. **Workflow reusability** -- Use composite actions and reusable workflows
2. **Secret management** -- Never hardcode secrets; use GitHub Secrets
3. **Execution time** -- Minimize with caching, parallel jobs, conditional steps
4. **Runners** -- Use `ubuntu-latest` for most jobs; self-hosted for special needs
5. **Branch protection** -- Require status checks before merging
6. **Dependency caching** -- Cache npm/pip/gradle dependencies aggressively

### Security Considerations

- Use `GITHUB_TOKEN` with minimal `permissions:` block
- Implement CODEOWNERS for `.github/workflows/` directory
- Use environment protection rules for production deployments
- Pin action versions to SHAs, not tags
- Audit third-party actions before use

### Matrix Builds

```yaml
strategy:
  matrix:
    node-version: [18, 20, 22]
    os: [ubuntu-latest, macos-latest]
  fail-fast: false
```

### Artifact Management

```yaml
- uses: actions/upload-artifact@v4
  with:
    name: build-output
    path: dist/
    retention-days: 5
```

## Project Detection

Pre-execution hook automatically detects project type:
```bash
test -f package.json && echo "Node.js project detected"
test -f requirements.txt && echo "Python project detected"
test -f go.mod && echo "Go project detected"
```

## Integration

**Can delegate to:** analyze-security, test-integration

**Requires approval from:** security (for production pipelines)

**Shares context with:** ops-deployment, ops-infrastructure

## Lifecycle Hooks

**Pre-execution:** Scans existing workflows in `.github/workflows/` and detects project type

**Post-execution:** Validates workflow YAML syntax by checking all workflow files

**On error:** Reports configuration error with link to GitHub Actions documentation