DevOps

Inspect Forgejo repositories through the REST API and web endpoints, especially Actions CI, task/run metadata, logs, package registry tags, haku-state CI, and…

MANDATORY deploy after every code change.

Add an IFTTT webhook notify job to a GitHub Actions workflow for mobile push notifications on deploy/CI success or failure.

Set up and optimize a complete local AI infrastructure — Ollama, Open WebUI, local RAG pipelines, and private model serving.

Use when the user asks to deploy, install, reinstall, redeploy, upgrade, or connect to the CDF Orchestration Airflow controller.

Use when Cosmos3 setup, fetch, inference, CUDA, uv, Docker, Hugging Face, GitHub, NGC, or checkpoint staging fails in NPA or in an upstream Cosmos framework…

Send Telegram Bot notifications for development events, CI/CD pipeline status, and AGENTS.md progress updates.

对登记主机上的服务做部署与运维：发布新版本（拉代码→跑部署脚本→健康检查→失败排障）、诊断异常（磁盘/日志/CPU）、自愈动作（日志截断/服务重启）。当用户要求"部署/发布/上线某服务"、"看下那台机器的日志/磁盘/CPU"、"重启服务"时使用。

Safely batch-merge bot dependency-update PRs (Renovate and Dependabot) in the current repo.

Build, configure and test a Cloudflare Worker locally with cf (cloudflare.config.ts, typed bindings, static assets, cf dev, vitest).

Prove a deployment from the server side.

Write the single GitHub Actions workflow that takes a repository from pull request to production through GHCR and Coolify.

Package a Next.js app as a runtime-only container image with a health probe and a fast shutdown.

创建、更新、验证并发布 AUR 包及 GitHub Actions 自动化。覆盖第三方版本监控、自有项目 tag 发布、GoReleaser、预编译多架构包、deb/rpm/tar.gz/AppImage，以及没有版本化 URL、只提供 mutable latest 下载地址的上游。用户提到首次发布…

Expert guidance on writing GitHub Actions workflows.

Chief Security Officer mode.

Design and implement multi-stage CI/CD pipelines using GitHub Actions with matrix builds, dependency caching, artifact management, and secret handling.

Analyzes malware C2 communication over HTTP, HTTPS, DNS, and custom protocols to reverse-engineer beacon patterns, command structures, data encoding, and…

Finds over-permissive RBAC roles and service-account token abuse paths in a Kubernetes cluster using kubectl auth can-i, rbac-police, kubectl-who-can, and…

Installs and runs the kube-bench tool against a Kubernetes cluster as a Job, DaemonSet, or standalone binary, selecting the correct benchmark version and…

Build an automated adversary infrastructure tracking system in Python (dnspython, python-whois, shodan, networkx) that pivots across passive DNS, certificate…

Deploy and harden a Sliver C2 team server (BishopFox's Go-based adversary emulation framework) with multi-protocol listeners (mTLS, HTTP/S, DNS, WireGuard)…

Build dumb-pipe and traffic-filtering C2 redirectors with nginx (proxy_pass) and Apache (mod_rewrite), deriving filter rules from a Malleable C2 profile…

Build threat actor profiles by collecting OSINT from vendor reports, paste sites, dark web forums, social media, and code repos, correlating indicators…