Skill UI

This guide details how to integrate OWASP ZAP (Zed Attack Proxy) into CI/CD pipelines (GitHub Actions/GitLab) for comprehensive Dynamic Application Security Testing (DAST). It covers configuring baseline, full, and API scans to identify common vulnerabilities like XSS, SQLi, and CSRF in running web applications and REST/GraphQL APIs, ensuring security quality gates in the development lifecycle.

This skill details implementing Software Composition Analysis (SCA) using Snyk. It helps security teams detect known vulnerabilities, check license compliance, and automate dependency remediation within CI/CD pipelines. Learn to integrate scanning into GitHub, GitLab, and Jenkins workflows, generate automated fix PRs, and continuously monitor deployed applications to safeguard the software supply chain.

This tool provides comprehensive automation for core GitLab operations, streamlining the entire development lifecycle. Users can manage projects, track issues, review merge requests, manage branches, and monitor CI/CD pipelines. It leverages a unified API interface to handle complex workflows, ensuring efficiency in version control and collaborative development environments.

A comprehensive guide for configuring and troubleshooting Jenkins when embedded within KubeSphere DevOps. Learn how to manage Jenkins via Configuration as Code (CasC), integrate advanced authentication methods like LDAP and OIDC, customize agent images, and connect to external sources such as GitLab. Covers everything from initial access to backup and recovery.

Use the Composio CLI to automate the entire Pull Request review and Continuous Integration (CI) triage process for GitHub and GitLab. This tool fetches code diffs, analyzes failure logs, posts detailed inline review comments, and iteratively patches and re-runs CI checks until the code passes, significantly enhancing code quality and developer efficiency.

This skill scaffolds the necessary configurations for advanced engineering workflows. It guides the user through setting up the issue tracking system (GitHub, GitLab, or local markdown), defining the canonical triage label vocabulary, and establishing the domain documentation context (single or multi-context). It must be run once to initialize the repository for subsequent agent-driven development skills.

Generate comprehensive, ready-to-use CI/CD pipeline configurations for running automated API tests using Newman. This skill provides templates for major platforms like GitHub Actions, GitLab CI, Jenkins, and Azure DevOps. It ensures seamless integration of Postman collections into automated build processes, including setting up environment variables, running tests, and publishing detailed JUnit and HTML reports.

Automates the entire Continuous Integration (CI) workflow, crucial before opening a Pull Request (PR). It systematically runs local unit tests for multiple languages (Python, Node, Rust), performs type checking, pushes the current branch to the remote repository, and finally provides the direct URL and status check for the CI platform (GitHub Actions/GitLab). This single command replaces multiple manual steps.

This script automates the Git push process, ensuring safety checks (e.g., preventing direct pushes to main branches) and verifying uncommitted changes. Upon successful push, it dynamically generates and displays direct tracking links for CI pipelines on major platforms like GitLab and GitHub Actions, providing immediate status updates for development teams.

Quickly retrieve and display the current Continuous Integration/Continuous Deployment (CI/CD) pipeline status for the active branch or a specific Pull/Merge Request. This tool supports major Git platforms including GitLab CI and GitHub Actions, providing developers with an immediate snapshot of build and test results.