1---2name: li-lance-android-seraphim-framework-flutter-cicd3description: CI/CD Standards4---56# CI/CD Standards78## **Priority: P1 (HIGH)**910Automates code quality checks, testing, and deployment to prevent regressions and accelerate11delivery.1213## Core Pipeline Steps14151. **Environment Setup**: Use stable Flutter channel. Cache dependencies (pub, gradle, cocoapods).162. **Static Analysis**: Enforce `flutter analyze` and `dart format`. Fail on any warning in strict17 mode.183. **Testing**: Run unit, widget, and integration tests. Upload coverage reports (e.g., Codecov).194. **Build**:20 - **Android**: Build App Bundle (`.aab`) for Play Store.21 - **iOS**: Sign and build `.ipa` (requires macOS runner).225. **Deployment** (CD): Automated upload to TestFlight/Play Console using standard tools (Fastlane,23 Codemagic).2425## Best Practices2627- **Timeout Limits**: Always set `timeout-minutes` (e.g., 30m) to save costs on hung jobs.28- **Fail Fast**: Run Analyze/Format _before_ Tests/Builds.29- **Secrets**: Never commit keys. Use GitHub Secrets or secure vaults for `keystore.jks` and `.p8`30 certs.31- **Versioning**: Automate version bumping based on git tags or semantic version scripts.3233## Reference3435- [**GitHub Actions Template**](references/github-actions.md) - Standard workflow file.36- [**Advanced Large-Scale Workflow**](references/advanced-workflow.md) - Parallel jobs, Caching,37 Strict Mode.38- [**Fastlane Standards**](references/fastlane.md) - Automated Signing & Deployment.3940## Anti-Patterns4142- ❌ Committing `keystore.jks`, `.p8`, or `.env` files — store all signing credentials in GitHub43 Secrets or a secure vault44- ❌ CI job without `timeout-minutes` — hung jobs burn runner minutes; always set an explicit45 timeout (e.g., 30m)46- ❌ Manual `version: 1.0.0+42` edits in `pubspec.yaml` — automate via git tags or a version script47 to prevent human error48- ❌ Running `flutter analyze` after `flutter build` — analysis is cheap and fast; fail fast by49 running it before builds/tests5051## Related Topics5253flutter/testing | dart/tooling5455---56> Source: [li-lance/android-seraphim-framework](https://github.com/li-lance/android-seraphim-framework) — distributed by [TomeVault](https://tomevault.io).57<!-- tomevault:4.0:skill_md:2026-06-16 -->
Run npx skillmds@latest add tomevault-io/li-lance-android-seraphim-framework-flutter-cicd in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
CI/CD Standards It is listed under DevOps & Infra on SkillMD.
This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
tomevault-io (@tomevault-io) published this skill. Their other Agent Skills are listed on their SkillMD profile.