No Secrets in Repo: Store keystore.jks, .p8, and .env in GitHub Secrets
No Uncapped Jobs: Always set timeout-minutes (e.g., 30m) to save runner minutes
No Manual Versioning: Automate pubspec.yaml versioning via git tags or scripts
No Late Analysis: Run flutter analyze before builds/tests for fast failure
Related Topics
flutter/testing | dart/tooling
Converted and distributed by TomeVault — claim your Tome and manage your conversions.
1---2name: hoangnguyen0403-agent-skills-standard-flutter-cicd3description: CI/CD Standards4---5# CI/CD Standards67## **Priority: P1 (HIGH)**8910## Core Pipeline Steps11121. **Environment Setup**: Use stable Flutter channel. Cache dependencies (pub, gradle, cocoapods).132. **Static Analysis**: Enforce `flutter analyze` and `dart format`. Fail on any warning in strict mode.143. **Testing**: Run unit, widget, and integration tests. Upload coverage reports (e.g., Codecov).154. **Build**:16 - **Android**: Build App Bundle (`.aab`) for Play Store.17 - **iOS**: Sign and build `.ipa` (requires macOS runner).185. **Deployment** (CD): Automated upload to TestFlight/Play Console using standard tools (Fastlane, Codemagic).1920## Best Practices2122- **Timeout Limits**: Always set `timeout-minutes` (e.g., 30m) to save costs on hung jobs.23- **Fail Fast**: Run Analyze/Format _before_ Tests/Builds.24- **Secrets**: Never commit keys. Use GitHub Secrets or secure vaults for `keystore.jks` and `.p8` certs.25- **Versioning**: Automate version bumping based on git tags or semantic version scripts.2627## Reference2829- [**GitHub Actions Template**](references/github-actions.md) - Standard workflow file.30- [**Advanced Large-Scale Workflow**](references/advanced-workflow.md) - Parallel jobs, Caching, Strict Mode.31- [**Fastlane Standards**](references/fastlane.md) - Automated Signing & Deployment.3233## Anti-Patterns3435- **No Secrets in Repo**: Store `keystore.jks`, `.p8`, and `.env` in GitHub Secrets36- **No Uncapped Jobs**: Always set `timeout-minutes` (e.g., 30m) to save runner minutes37- **No Manual Versioning**: Automate `pubspec.yaml` versioning via git tags or scripts38- **No Late Analysis**: Run `flutter analyze` before builds/tests for fast failure3940## Related Topics4142flutter/testing | dart/tooling4344---45> Converted and distributed by [TomeVault](https://tomevault.io/claim/HoangNguyen0403) — claim your Tome and manage your conversions.46<!-- tomevault:4.0:skill_md:2026-04-16 -->
Run npx skillmds@latest add tomevault-io/hoangnguyen0403-agent-skills-standard-flutter-cicd in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
CI/CD Standards It is listed under DevOps & Infra on SkillMD.
This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
tomevault-io (@tomevault-io) published this skill. Their other Agent Skills are listed on their SkillMD profile.
tomevault-io