Skill UI

Generates production-ready CI/CD configurations for GitHub Actions, GitLab CI, and Jenkins, covering testing, security, build, and deployment stages to automate software delivery pipelines and multi-environment releases.

This skill enables Claude to generate production-ready CI/CD pipeline configurations for major platforms, including GitHub Actions, GitLab CI, and Jenkins. It automates the entire software development lifecycle, supporting best practices for testing, building, security scanning, and multi-environment deployment. Use this when setting up automated software delivery workflows.

Provides GitHub Actions and GitLab CI pipeline templates with lint, test, and deploy stages, reusable setup actions, matrix strategies, and anti-pattern checklists for reliable automation.

Automates GitLab project operations through Composio's Rube MCP, covering issue tracking, merge request workflows, CI/CD pipelines, branch handling, and user management for faster DevOps work.

A comprehensive guide featuring best practices and patterns for building robust GitLab CI/CD pipelines. Covers multi-stage deployments, containerization (Docker), infrastructure as code (Terraform), security scanning, caching strategies, and advanced GitOps workflows for automated testing and deployment to Kubernetes.

This tool allows developers to integrate advanced AI video generation (using Kling AI) directly into continuous integration and continuous deployment pipelines (e.g., GitHub Actions, GitLab CI). Automate the creation of marketing videos, product demos, or regression video testing whenever code changes or a release occurs, ensuring consistent and timely video asset updates.

A comprehensive guide to integrating Sentry into continuous integration and continuous deployment (CI/CD) pipelines (e.g., GitHub Actions, GitLab CI, CircleCI). This skill automates complex tasks such as creating releases, uploading source maps for readable stack traces, associating commits, and tracking deployment environments, ensuring rapid and accurate debugging of production errors.

Generates practical and robust CI/CD pipelines by programmatically detecting the project's entire technology stack (language, runtime, tooling). It provides fast baseline setup for GitHub Actions or GitLab CI, ensuring repeatability, environment awareness, and alignment with project dependencies. Ideal for onboarding new repositories, standardizing DevOps workflows, or migrating existing deployment processes.

This comprehensive guide details how to design and implement an end-to-end DevSecOps pipeline leveraging GitLab CI/CD. It integrates crucial automated security checks—such as SAST, DAST, container scanning, dependency scanning, and secret detection—directly into the development workflow. By adopting this approach, teams can effectively 'shift left' security, identifying and mitigating vulnerabilities early in the development lifecycle to ensure compliance and robust application security.

This skill guides the integration of OWASP ZAP for Dynamic Application Security Testing (DAST) directly into CI/CD pipelines. Learn how to perform baseline, full, and API scans against running applications, interpret complex security findings, tune scan policies, and establish automated security quality gates in modern CI/CD platforms like GitHub Actions and GitLab CI. Essential for DevSecOps practices.

This skill details implementing Software Composition Analysis (SCA) using Snyk. It helps security teams detect known vulnerabilities, check license compliance, and automate dependency remediation within CI/CD pipelines. Learn to integrate scanning into GitHub, GitLab, and Jenkins workflows, generate automated fix PRs, and continuously monitor deployed applications to safeguard the software supply chain.

Use Trivy to automate comprehensive vulnerability detection (CVEs, misconfigurations) in Docker container images within CI/CD pipelines. This skill guides users on establishing robust quality gates—such as integrating into GitHub Actions or GitLab CI—to ensure that only secure images are pushed to production registries, covering OS packages, dependencies, and Dockerfile best practices.