Skip to content
Back to skills

Ci Cd Harness

ASecurity

Build PR validation, local CI reproduction, CI triage, and deployment gates. Use when a repo needs GitHub Actions beyond basic validation, coverage/artifact expectations, branch protection notes, CI failure triage docs, or release/deployment readiness gates.

  • 3 stars
  • 0 votes
  • 0 copies
  • 5 views
  • Added September 12, 2026
devopsgitapici/cd

Works with

  • api

Security analysis

A100/100

Pro scans all 2 files and shows the line behind each finding

Scanned September 12, 2026

npx -y skills add pax-k/pax-fullstack-harness --skill ci-cd-harness --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Ci Cd Harness?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Ci Cd Harness
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/pax-k-ci-cd-harness/badge)](https://www.skillsdirectory.com/skills/pax-k-ci-cd-harness)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: ci-cd-harness
description: Build PR validation, local CI reproduction, CI triage, and deployment gates. Use when a repo needs GitHub Actions beyond basic validation, coverage/artifact expectations, branch protection notes, CI failure triage docs, or release/deployment readiness gates.
---

# CI/CD Harness

## Purpose

Make CI reproducible, debuggable, and aligned with local validation instead of a separate source of truth.

## Inspect First

- existing workflows, package manager, scripts, test/build outputs, coverage config, deployment config, branch protection docs, and CI failures if available

## Procedure

1. Align local and remote validation.
   - CI should call `./scripts/validate` or documented wrappers.
   - Add `scripts/ci-local` when CI-only failures are likely.
   - Prefer a thin `scripts/ci-local` wrapper that runs lint, typecheck, unit tests, and build before adding slower release or deployment checks.

2. Improve PR checks.
   - Cache dependencies.
   - Upload useful artifacts or coverage only when project tooling produces them.
   - Separate slow or deployment checks from fast PR checks when needed.

3. Document triage.
   - Add `docs/development/ci.md`.
   - Include how to reproduce CI locally and how to inspect artifacts/logs.

4. Define deployment gates.
   - Coordinate with `release-readiness-harness`.
   - Document required validation before deploy.
   - Keep fast smoke checks separate from full `./scripts/validate`; CI-local may reproduce PR validation while smoke proves runtime/deployment health.
   - Use stack-specific smoke examples where possible: web URL, API health endpoint, DB readiness/migration status, or library import/build sanity.

## Validation

- Validate workflow syntax when tooling is available.
- Run `./scripts/ci-local` or `./scripts/validate`.
- Confirm CI docs match workflow names and commands.

## Completion Criteria

- CI uses the same stable command interface as local development.
- CI failures have a documented reproduction path.

Files in this skill

  • SKILL.md2 KB
  • agents/openai.yaml199 B

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.