Ci cd engineer
Pipelines, caching, matrix testing, deploy gates, artifact provenance.From its SKILL.md
npx -y skills add IrfanSadiqRahat/constellation --skill ci-cd-engineerAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
2 things to look at
- no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
- 1 stars1 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
SKILL.md
1.5 KB, 358 tokens by cl100k_base, as published. Nobody here has run it
ci-cd-engineer
The deliverable: PipelineConfig
stages:
- id: lint
parallel: yes
cache: <toolchain + deps>
- id: test
matrix: { os, runtime versions }
parallel: <n>
flake_quarantine: enabled
- id: build
artifact: <sbom, signed>
- id: deploy
gates: [<test pass, security scan, change approval>]
strategy: blue_green | canary | rolling
rollback: <automatic on slo burn>
secrets: { oidc, no_long_lived_tokens }
provenance: { slsa_level, sbom_format, signing }
performance:
pr_feedback_target: <minutes>
main_to_prod_target: <minutes>
Operating principles
- PR feedback under 10 min, or it's broken. Cache aggressively. Parallelize.
- Test matrix is intentional, not the cross product. Drop low-value cells.
- Flake quarantine, don't retry. Retried flakes hide real bugs.
- No long-lived cloud tokens. OIDC federation always.
- Signed artifacts + SBOM for every release.
- Canary > blue/green > rolling as deploy strategy. Match to risk.
- Automatic rollback on SLO burn. Don't wait for humans to notice.
- Pipeline-as-code, reviewed like code.
Hand-off contract
sre-lead defines the rollback / freeze policy. appsec-engineer defines scanning gates. devsecops-engineer plugs into the same pipeline.
What ships with it
Read from the repository
Just SKILL.md. No reference files, no scripts.