Overview
CI/CD pipeline design with GitHub Actions, GitLab CI — build, test, deploy automation. Use when setting up CI/CD pipelines or automating deployments.
Capabilities
- Workflow syntax and job dependencies
- Caching strategies
- Secrets management
- Deployment strategies (blue-green, canary)
- Matrix builds for multi-env testing
When to Use
Trigger phrases:
"ci cd pipeline"
"Building and configuring this technology"
"Integrating with existing workflows"
"Optimizing performance and reliability"
Building and configuring this technology
Integrating with existing workflows
Optimizing performance and reliability
Common Patterns
- Start with official documentation and examples
- Follow established community patterns
- Test in staging before production deployment
How to Use
- Define infrastructure as code (Terraform, CloudFormation, Pulumi)
- Review changes through PR process before applying
- Configure monitoring and alerting for critical paths
- Set up secrets management (Vault, AWS Secrets Manager, etc.)
- Document runbooks for deployment, rollback, and incident response
- Test disaster recovery procedures regularly
When NOT to Use
- Task is outside your authorization scope
- You need to implement controls (use implementing-* skills)
- Task is about analysis, not action (use analyzing-* skills)
- You don't have access to target systems
- Task requires compliance expertise (consult professionals)
- Task is about defense, not offense (use defensive skills)
Red Flags
- Infrastructure changes without review: Unreviewed changes cause outages — use PRs for infra code
- No rollback strategy: Every deployment needs a tested rollback plan before it runs
- Secrets in configuration files: Secrets in YAML/JSON get committed to version control
- Missing monitoring and alerting: Without monitoring, outages go undetected until users report them
- No documentation for runbooks: Without runbooks, on-call engineers waste time re-discovering procedures
Notes
- This skill integrates with the broader 1ai-skills ecosystem for devops workflows
- Combine with related skills for maximum impact across your pipeline
- Monitor output quality and iterate on configuration based on results
- Keep dependencies up to date for security and performance
- Document custom workflows and configurations for team knowledge sharing
Error Handling
| Error | Cause | Fix |
|---|---|---|
| Pipeline fails on deploy | Missing environment variables | Validate all env vars before deploy step |
| Build cache miss | Cache key changed or expired | Use consistent cache keys with lockfile hash |
| Secret not found | Wrong context or environment | Verify secret is in correct context/environment |
| Matrix build inconsistency | Different runner versions | Pin runner images and tool versions |
Additional Resources
- Review the 1ai-skills repository for related devops skills
- Check the references/ directory for checklists and templates
- Join the community for best practices and support
- Contribute improvements via pull requests
Verification
- Pipeline executes end-to-end on a clean branch with no cached artifacts
- All secret references resolve correctly in every environment (staging and production)
- Deployment rollback completes within the documented RTO target
- Matrix builds pass on all specified OS and runtime version combinations
- Build artifacts are reproducible when rebuilt from the same commit SHA
Process
# Example: GitHub Actions CI
name: CI
on: [push, pull_request]
jobs:
test:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/setup-python@v5
with: {python-version: "3.12"}
- run: pip install -e ".[test]"
- run: pytest --cov
- Analyze the task requirements
- Apply domain expertise
- Verify output quality
Anti-Rationalization Table
| Rationalization | Reality |
|---|---|
| "Manual deployments are fine" | Manual deployments are error-prone and不可 repeatable. Automate. |
| "We do not need monitoring" | Without monitoring, you are flying blind. Add observability from day one. |
| "Infrastructure as code is overkill" | IaC enables reproducibility, version control, and disaster recovery. |