Skill UI

This comprehensive guide details how to configure a complete Continuous Integration and Continuous Deployment (CI/CD) pipeline for Replit applications using GitHub Actions. Learn to connect your GitHub repository, set up automated testing on pull requests, perform post-deployment health checks, and ensure reliable, automated deployment whenever code is pushed.

This expert skill specializes in guiding comprehensive GitHub issue resolution. It covers systematic bug investigation, feature implementation, and collaborative development workflows. Expertise includes issue triage, root cause analysis, test-driven development, and professional pull request management, ensuring vague reports are transformed into production-ready code following modern CI/CD practices.

Configures robust CI/CD pipelines for Vercel projects using GitHub Actions. This guide automates the full deployment lifecycle, including generating preview environments on every pull request, performing reliable production builds upon merging to main, and implementing test gating to ensure code quality before release. Ideal for professional web development workflows.

Comprehensive guide for creating, managing, and automating preview deployments on Vercel. Learn how to utilize both the CLI and REST API to deploy unique, temporary environments for specific branches or pull requests. This is essential for pre-production testing, integrating into CI/CD pipelines, and sharing stable preview URLs with stakeholders before merging to main.

A rigorous, security-focused code review process designed for Pull Requests (PRs), commits, and diffs. It moves beyond general reviews by focusing intensely on high-risk areas such as authentication, cryptography, external calls, and value transfer. The methodology is evidence-based, requiring detailed attack scenario modeling and generating comprehensive, auditable markdown reports to identify overlooked vulnerabilities and regressions.

This skill fetches unread GitHub Pull Requests (PRs) that require review from a specified team or were opened by a team member. It is ideal for users who need to check their team's review queue, find PRs needing attention, or automate the process of reviewing open code submissions without manually browsing GitHub notifications. Requires GitHub CLI authentication.

This guide outlines best practices for creating high-quality, structured pull requests (PRs) using Git and GitHub CLI. It ensures that every PR description captures not only what changed, but also the 'why' and necessary context for reviewers, significantly improving the code review process and adherence to engineering standards.

Utilizes GitHub Advanced Security (GHAS) and CodeQL to implement comprehensive SAST across enterprise repositories. This solution automates static analysis, detecting vulnerabilities (e.g., SQL injection, XSS) and secrets at scale, enabling true 'shift-left' security by integrating checks directly into pull request workflows and CI/CD pipelines.

This guide details how to integrate Static Application Security Testing (SAST) tools like CodeQL and Semgrep into your CI/CD pipelines using GitHub Actions. It covers setting up automated vulnerability detection on pull requests, tuning rules to minimize false positives, uploading SARIF results for centralized security reporting, and enforcing quality gates to prevent vulnerable code from merging into protected branches. Essential for DevSecOps and compliance (SOC 2, PCI DSS).

Master the use of the `gh` CLI to interact with core GitHub features. This guide covers managing issues, checking Pull Request statuses, listing and debugging CI workflow runs, and executing advanced data queries via the GitHub API. Essential for automating DevOps workflows and debugging CI/CD pipelines directly from the terminal.

A comprehensive guide to professional Git version control. It covers best practices for branching strategies (GitHub Flow, GitFlow, Trunk-Based), writing standardized commit messages using Conventional Commits, managing merges vs. rebases, and defining effective Pull Request workflows. Ideal for any development team looking to improve code collaboration and maintain a clean, traceable history.

Guides structured reviews for Flutter/Dart pull or merge requests, checking correctness, security, style, tests, and documentation while verifying branch scope and CI health.