“CI/CD”

CI/CD pipeline patterns with GitHub Actions, release automation, and testing strategies.

Design GitHub Actions CI/CD topology — trigger selection (push / pull_request / workflow_run / workflow_dispatch), job sequencing via needs, concurrency…

Use when a Threadlight pilot must reach production through a CI/CD pipeline instead of the agent running `azd up` directly — prod deploys run under a…

Scans GitHub Actions workflows and CI/CD pipeline configurations for supply chain attack vectors including unpinned actions, script injection via expressions…

Design and generate CI/CD pipelines from project stack signals across GitHub Actions, GitLab CI, CircleCI, and Buildkite.

Wires Promptfoo and DeepTeam into CI/CD for automated, repeatable red-teaming of LLM apps against OWASP LLM Top 10, OWASP Agentic, and MITRE ATLAS presets…

Scan source code repositories, CI/CD pipelines, and configuration files for exposed AWS credentials using TruffleHog, git-secrets, and AWS-native detection.

Initialize test framework and CI/CD setup for browser, backend or mobile stacks.

Design and implement a comprehensive DevSecOps pipeline in GitLab CI/CD integrating SAST, DAST, container scanning, dependency scanning, and secret detection.

Expert implementation and optimization of GitHub Actions CI/CD pipelines.

Wire Promptfoo and DeepTeam into CI/CD for automated regression red-teaming of LLM apps against OWASP LLM Top 10 and OWASP Agentic presets, failing the build…

Configure a GitLab CI/CD pipeline that embeds SAST (Semgrep, SpotBugs, Gosec, Bandit, NodeJsScan), DAST, container scanning, dependency scanning, and secret…

Build GitHub Actions CI/CD and agentic workflows; Dependabot, Lefthook, and zizmor audits.

Send Telegram Bot notifications for development events, CI/CD pipeline status, and AGENTS.md progress updates.

Generate and optimize GitHub Actions CI/CD workflows.

DevOps for CI/CD, containers, Kubernetes, and Terraform.

Work with GitHub Actions CI/CD workflows - read live syntax, monitor runs, and debug failures.

既存リポジトリに情報漏えい・侵害につながるリスクがないかを、依存パッケージの既知脆弱性とサプライチェーン、CI/CD、シークレット露出、認証・認可、コードの脆弱性（インジェクション等）、個人情報保護、インフラ設定の観点で並列に読み取り監査し、検証済みの指摘を深刻度順のレポートにまとめる。「セキュリティ監査」「脆弱性診…

Monitor the CI pipeline for the current branch via a background Monitor script (GitHub or GitLab), reacting to pass, fail, and manual-gate states.

Run after each commit to detect CI-relevant entrypoints and surface whether repository checks should be verified or automated.

Helps understand and write EAS workflow YAML files for Expo projects.

AWS architecture patterns for webhooks, event routing, SQS/Lambda pipelines, microservices, environment target guards, and long-running server deployment with…

Turn a complete beginner's app idea into a buildable plan, then keep them oriented while they build.

Implements and hardens Docker-first build, test, and release pipelines, where one build script runs the quality gates, the build, and the e2e tests inside…