← all publishers

Contrast-Security-OSS

@contrast-security-oss source repo

Report this profile Claim this profile

• 7 skills
• 0 followers
• 1 week ago last updated

1. ▌
   Release · contrast-security-oss

   Orchestrate a full release of mcp-contrast end to end, changelog-first. Preflight, deferred-landing changelog draft, version gate, release ticket and branch, smoke test, Gradle Release dispatch and monitoring, artifact verification, release-notes sync, tracker sweep, and Slack announcement. Run when a human asks to cut, make, or ship a release. Human gates at changelog approval, version choice, changelog PR merge, go/no-go, tracker sweep, and the Slack post.
   1 install
2. ▌
   Archunit · contrast-security-oss

   Fix ArchUnit architectural violations. Use when ArchUnit tests fail, when fixing grandfathered violations from the freeze store, or when new code introduces a dependency the architecture rules forbid. Covers the fix-then-shrink workflow, SDK containment patterns, and anti-patterns to avoid.
   1 install
3. ▌
   Fix Crap · contrast-security-oss

   Fix methods that fail the CRAP metric gate. Use when crapCheck fails, when a method appears in the crap4j baseline, when the user asks to reduce a method's CRAP score, or when make check fails with a CRAP violation. Covers diagnosis, the test-or-simplify decision, and baseline management.
   1 install
4. ▌
   Bead Workflow · contrast-security-oss

   Manage beads through their full lifecycle in this repository. Use when creating, updating, claiming, implementing, closing, triaging, or commenting on a bead. Covers labeling, pre-claim checks, branch requirements, stacked-branch handling, commit-before-close discipline, Jira integration, and sync. Triggers on any bead mutation, not reads.
   1 install
5. ▌
   Jira Workflow · contrast-security-oss bundle

   Jira ticket lifecycle for the AIML project. Covers creation, bead parity, and status transitions through the PR lifecycle. Use when creating a Jira ticket, when a PR is opened or merges for a Jira-linked branch, or when reconciling bead-to-Jira state. Triggers include "create a jira ticket", "create an AIML ticket", a bead needing an external Jira reference, or a user reporting a merged PR whose branch matches an AIML key.
   1 install
6. ▌
   Test MCP Server · contrast-security-oss bundle

   Pre-release exploratory test of the Contrast stdio MCP server. Builds the jar fresh, wires it into a separate headless Claude instance, and has that instance spawn one subagent per discovered tool to test it against a live org. Run on demand only, before a release or when a human explicitly asks, not during routine feature development. Asks which mode to run if not specified.
   1 install
7. ▌
   Update Changelog · contrast-security-oss

   Bring the [Unreleased] section of CHANGELOG.md up to date before a release. Diffs the last release tag against origin/main, drafts entries PR-by-PR, audits the draft for completeness with a read-only subagent, and lands the result on a branch after the user approves (or returns the approved draft to /release in deferred-landing mode). Run pre-release, before dispatching the Gradle Release workflow, or whenever a human asks for a changelog update. Optional free text is treated as guidance, e.g. classification hints.
   1 install