Skill UI

A comprehensive guide for configuring and troubleshooting Jenkins when embedded within KubeSphere DevOps. Learn how to manage Jenkins via Configuration as Code (CasC), integrate advanced authentication methods like LDAP and OIDC, customize agent images, and connect to external sources such as GitLab. Covers everything from initial access to backup and recovery.

Generate comprehensive, ready-to-use CI/CD pipeline configurations for running automated API tests using Newman. This skill provides templates for major platforms like GitHub Actions, GitLab CI, Jenkins, and Azure DevOps. It ensures seamless integration of Postman collections into automated build processes, including setting up environment variables, running tests, and publishing detailed JUnit and HTML reports.

This script automates the Git push process, ensuring safety checks (e.g., preventing direct pushes to main branches) and verifying uncommitted changes. Upon successful push, it dynamically generates and displays direct tracking links for CI pipelines on major platforms like GitLab and GitHub Actions, providing immediate status updates for development teams.

Quickly retrieve and display the current Continuous Integration/Continuous Deployment (CI/CD) pipeline status for the active branch or a specific Pull/Merge Request. This tool supports major Git platforms including GitLab CI and GitHub Actions, providing developers with an immediate snapshot of build and test results.

A comprehensive methodology for exploiting modern Continuous Integration/Continuous Delivery (CI/CD) pipelines. This skill covers advanced attack vectors across major platforms, including GitHub Actions expression injection, Jenkins RCE, GitLab YAML abuse, and Azure DevOps compromise. Techniques focus on privilege escalation, credential theft, and supply chain poisoning, mapping to MITRE ATT&CK T1195.002.

A comprehensive methodology for offensive security, detailing how to systematically extract secrets from Continuous Integration/Continuous Deployment (CI/CD) pipelines. Techniques covered include dumping environment variables, exploiting misconfigurations in HashiCorp Vault, AWS Secrets Manager, and cloud platform tokens (GitHub, GitLab, etc.). It also guides attackers on OIDC federation abuse, build log analysis, and advanced exfiltration methods, mapping to MITRE ATT&CK T1552.

Provides a comprehensive setup for Playwright End-to-End (E2E) testing. This skill automatically analyzes your project structure (framework detection, TypeScript/JavaScript) and generates all necessary files: the core playwright.config.ts, standardized folder structure, initial test examples, and full CI/CD workflows (GitHub Actions/GitLab). It ensures your testing environment is production-ready, supporting modern frameworks like Next.js, React, Vue, and Angular.

This tool provides comprehensive automation for core GitLab operations, streamlining the entire development lifecycle. Users can manage projects, track issues, review merge requests, manage branches, and monitor CI/CD pipelines. It leverages a unified API interface to handle complex workflows, ensuring efficiency in version control and collaborative development environments.

Configure GitLab CI/CD pipelines and runners for automated building, testing, and deployment, including jobs, caching, artifacts, environments, Docker builds, and CI/CD variables.

This skill provides comprehensive patterns for creating efficient GitLab CI/CD pipelines. It covers automated testing, building, deployment strategies, Docker integration, multi-environment configurations, Terraform workflows, security scanning, and caching optimization to streamline DevOps processes.

This skill generates ready-to-use CI/CD pipeline configurations for automated API testing using Newman. It supports multiple platforms including GitHub Actions, GitLab CI, Jenkins, Azure DevOps, and CircleCI. Users can specify collection sources, environment variables, and report formats like JUnit or HTML. The generated scripts install Newman and execute Postman collections within the pipeline, ensuring consistent API quality checks across different development environments.