opencode-skills-collection 4.0.67 → 4.0.69
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/bundled-skills/.antigravity-install-manifest.json +281 -1
- package/bundled-skills/access-review/SKILL.md +394 -0
- package/bundled-skills/access-review/references/details.md +121 -0
- package/bundled-skills/agent-evals/SKILL.md +420 -0
- package/bundled-skills/agent-observability/SKILL.md +346 -0
- package/bundled-skills/agent-observability/references/details.md +786 -0
- package/bundled-skills/ai-agent-security/SKILL.md +393 -0
- package/bundled-skills/ai-agent-security/references/details.md +912 -0
- package/bundled-skills/ai-coding-agent-guardrails/SKILL.md +442 -0
- package/bundled-skills/ai-coding-agent-guardrails/references/details.md +753 -0
- package/bundled-skills/ai-inference-service-mesh/SKILL.md +449 -0
- package/bundled-skills/ai-pipeline-orchestration/SKILL.md +287 -0
- package/bundled-skills/ai-red-teaming/SKILL.md +409 -0
- package/bundled-skills/ai-security-hardening/SKILL.md +343 -0
- package/bundled-skills/ai-sre-incident-response/SKILL.md +336 -0
- package/bundled-skills/alerting-oncall/SKILL.md +458 -0
- package/bundled-skills/alerting-oncall/references/details.md +84 -0
- package/bundled-skills/anti-slop-design/SKILL.md +393 -0
- package/bundled-skills/antigravity-maintainer-batch-release/SKILL.md +1 -0
- package/bundled-skills/apk-redteam-pipeline/SKILL.md +446 -0
- package/bundled-skills/argocd-gitops/SKILL.md +469 -0
- package/bundled-skills/arm-templates/SKILL.md +438 -0
- package/bundled-skills/arm-templates/references/details.md +64 -0
- package/bundled-skills/artifact-yylo/SKILL.md +122 -0
- package/bundled-skills/asset-inventory/SKILL.md +412 -0
- package/bundled-skills/asset-inventory/references/details.md +127 -0
- package/bundled-skills/audit-logging/SKILL.md +476 -0
- package/bundled-skills/aws-cloudtrail/SKILL.md +486 -0
- package/bundled-skills/aws-cost-optimization/SKILL.md +331 -0
- package/bundled-skills/aws-ec2/SKILL.md +426 -0
- package/bundled-skills/aws-ecs-fargate/SKILL.md +388 -0
- package/bundled-skills/aws-iam/SKILL.md +463 -0
- package/bundled-skills/aws-lambda/SKILL.md +428 -0
- package/bundled-skills/aws-rds/SKILL.md +380 -0
- package/bundled-skills/aws-s3/SKILL.md +434 -0
- package/bundled-skills/aws-secrets-manager/SKILL.md +486 -0
- package/bundled-skills/aws-vpc/SKILL.md +436 -0
- package/bundled-skills/azure-ai-document-intelligence-ts/SKILL.md +1 -1
- package/bundled-skills/azure-aks/SKILL.md +423 -0
- package/bundled-skills/azure-devops/SKILL.md +457 -0
- package/bundled-skills/azure-functions-devsec/SKILL.md +436 -0
- package/bundled-skills/azure-keyvault/SKILL.md +455 -0
- package/bundled-skills/azure-keyvault/references/details.md +83 -0
- package/bundled-skills/azure-monitor-audit/SKILL.md +379 -0
- package/bundled-skills/azure-networking/SKILL.md +448 -0
- package/bundled-skills/azure-networking/references/details.md +135 -0
- package/bundled-skills/azure-sql/SKILL.md +413 -0
- package/bundled-skills/azure-sql/references/details.md +113 -0
- package/bundled-skills/azure-vms/SKILL.md +402 -0
- package/bundled-skills/azure-vms/references/details.md +134 -0
- package/bundled-skills/backup-recovery/SKILL.md +388 -0
- package/bundled-skills/bb-methodology/SKILL.md +451 -0
- package/bundled-skills/bb-methodology/references/details.md +120 -0
- package/bundled-skills/block-storage/SKILL.md +371 -0
- package/bundled-skills/blue-green-deploy/SKILL.md +453 -0
- package/bundled-skills/blue-green-deploy/references/details.md +90 -0
- package/bundled-skills/bug-bounty/SKILL.md +447 -0
- package/bundled-skills/bug-bounty/references/details.md +1316 -0
- package/bundled-skills/bugcrowd-reporting/SKILL.md +351 -0
- package/bundled-skills/business-continuity/SKILL.md +463 -0
- package/bundled-skills/career-ops/SKILL.md +186 -0
- package/bundled-skills/cdn-setup/SKILL.md +374 -0
- package/bundled-skills/change-management/SKILL.md +438 -0
- package/bundled-skills/change-management/references/details.md +105 -0
- package/bundled-skills/circleci/SKILL.md +475 -0
- package/bundled-skills/cis-benchmarks/SKILL.md +150 -0
- package/bundled-skills/cloudflare-pages/SKILL.md +318 -0
- package/bundled-skills/cloudflare-r2/SKILL.md +353 -0
- package/bundled-skills/cloudflare-workers/SKILL.md +415 -0
- package/bundled-skills/cloudflare-zero-trust/SKILL.md +361 -0
- package/bundled-skills/cloudformation/SKILL.md +461 -0
- package/bundled-skills/constraint-driven-development/SKILL.md +335 -0
- package/bundled-skills/constraint-driven-development/references/floor-guard.md +99 -0
- package/bundled-skills/container-hardening/SKILL.md +126 -0
- package/bundled-skills/container-registries/SKILL.md +435 -0
- package/bundled-skills/container-scanning/SKILL.md +416 -0
- package/bundled-skills/convex-backend/SKILL.md +338 -0
- package/bundled-skills/dast-scanning/SKILL.md +437 -0
- package/bundled-skills/database-backups/SKILL.md +425 -0
- package/bundled-skills/datadog/SKILL.md +487 -0
- package/bundled-skills/dependency-scanning/SKILL.md +457 -0
- package/bundled-skills/devcontainers-nix/SKILL.md +416 -0
- package/bundled-skills/disaster-recovery/SKILL.md +374 -0
- package/bundled-skills/disaster-recovery/references/details.md +219 -0
- package/bundled-skills/dns-management/SKILL.md +375 -0
- package/bundled-skills/docker-compose/SKILL.md +482 -0
- package/bundled-skills/docker-management/SKILL.md +426 -0
- package/bundled-skills/ebpf-observability/SKILL.md +436 -0
- package/bundled-skills/ebpf-observability/references/details.md +542 -0
- package/bundled-skills/elk-stack/SKILL.md +487 -0
- package/bundled-skills/enterprise-vpn-attack/SKILL.md +395 -0
- package/bundled-skills/evidence-hygiene/SKILL.md +404 -0
- package/bundled-skills/feature-flags/SKILL.md +426 -0
- package/bundled-skills/feature-flags/references/details.md +86 -0
- package/bundled-skills/fedramp-compliance/SKILL.md +453 -0
- package/bundled-skills/firebase-app-platform/SKILL.md +381 -0
- package/bundled-skills/firewall-config/SKILL.md +479 -0
- package/bundled-skills/gcp-audit-logs/SKILL.md +452 -0
- package/bundled-skills/gcp-audit-logs/references/details.md +56 -0
- package/bundled-skills/gcp-cloud-functions/SKILL.md +284 -0
- package/bundled-skills/gcp-cloud-sql/SKILL.md +277 -0
- package/bundled-skills/gcp-compute/SKILL.md +319 -0
- package/bundled-skills/gcp-gke/SKILL.md +307 -0
- package/bundled-skills/gcp-networking/SKILL.md +293 -0
- package/bundled-skills/gcp-secret-manager/SKILL.md +421 -0
- package/bundled-skills/gcp-secret-manager/references/details.md +131 -0
- package/bundled-skills/gdpr-compliance/SKILL.md +451 -0
- package/bundled-skills/gdpr-compliance/references/details.md +145 -0
- package/bundled-skills/geo-audit/SKILL.md +368 -0
- package/bundled-skills/geo-brand-mentions/SKILL.md +68 -0
- package/bundled-skills/geo-brand-mentions/references/details.md +471 -0
- package/bundled-skills/geo-citability/SKILL.md +350 -0
- package/bundled-skills/geo-compare/SKILL.md +340 -0
- package/bundled-skills/geo-content/SKILL.md +383 -0
- package/bundled-skills/geo-crawlers/SKILL.md +408 -0
- package/bundled-skills/geo-llmstxt/SKILL.md +464 -0
- package/bundled-skills/geo-platform-optimizer/SKILL.md +314 -0
- package/bundled-skills/geo-proposal/SKILL.md +378 -0
- package/bundled-skills/geo-prospect/SKILL.md +225 -0
- package/bundled-skills/geo-report/SKILL.md +436 -0
- package/bundled-skills/geo-report-pdf/SKILL.md +157 -0
- package/bundled-skills/geo-schema/SKILL.md +408 -0
- package/bundled-skills/geo-technical/SKILL.md +78 -0
- package/bundled-skills/geo-technical/references/details.md +543 -0
- package/bundled-skills/git-workflow/SKILL.md +460 -0
- package/bundled-skills/github-actions/SKILL.md +368 -0
- package/bundled-skills/gitlab-ci/SKILL.md +340 -0
- package/bundled-skills/google-no-code/SKILL.md +136 -0
- package/bundled-skills/gpu-kubernetes-operations/SKILL.md +468 -0
- package/bundled-skills/gpu-server-management/SKILL.md +236 -0
- package/bundled-skills/hashicorp-vault/SKILL.md +408 -0
- package/bundled-skills/helm-charts/SKILL.md +469 -0
- package/bundled-skills/hipaa-compliance/SKILL.md +451 -0
- package/bundled-skills/hunt-aspnet/SKILL.md +321 -0
- package/bundled-skills/hunt-ato/SKILL.md +184 -0
- package/bundled-skills/hunt-auth-bypass/SKILL.md +426 -0
- package/bundled-skills/hunt-auth-bypass/references/details.md +80 -0
- package/bundled-skills/hunt-brute-force/SKILL.md +341 -0
- package/bundled-skills/hunt-business-logic/SKILL.md +281 -0
- package/bundled-skills/hunt-cache-poison/SKILL.md +382 -0
- package/bundled-skills/hunt-captcha-bypass/SKILL.md +136 -0
- package/bundled-skills/hunt-cicd/SKILL.md +311 -0
- package/bundled-skills/hunt-clickjacking/SKILL.md +110 -0
- package/bundled-skills/hunt-cors/SKILL.md +335 -0
- package/bundled-skills/hunt-dom/SKILL.md +323 -0
- package/bundled-skills/hunt-exceptional-conditions/SKILL.md +111 -0
- package/bundled-skills/hunt-file-upload/SKILL.md +202 -0
- package/bundled-skills/hunt-fintech-graphql/SKILL.md +289 -0
- package/bundled-skills/hunt-forgot-password/SKILL.md +114 -0
- package/bundled-skills/hunt-grpc/SKILL.md +317 -0
- package/bundled-skills/hunt-host-header/SKILL.md +309 -0
- package/bundled-skills/hunt-html-injection/SKILL.md +106 -0
- package/bundled-skills/hunt-http-smuggling/SKILL.md +129 -0
- package/bundled-skills/hunt-http-smuggling/references/phase2h-smuggling-cachepoison.md +177 -0
- package/bundled-skills/hunt-idor/SKILL.md +434 -0
- package/bundled-skills/hunt-jwt-crypto/SKILL.md +221 -0
- package/bundled-skills/hunt-k8s/SKILL.md +337 -0
- package/bundled-skills/hunt-laravel/SKILL.md +255 -0
- package/bundled-skills/hunt-ldap/SKILL.md +351 -0
- package/bundled-skills/hunt-lfi/SKILL.md +311 -0
- package/bundled-skills/hunt-llm-ai/SKILL.md +289 -0
- package/bundled-skills/hunt-mfa-bypass/SKILL.md +177 -0
- package/bundled-skills/hunt-misc/SKILL.md +378 -0
- package/bundled-skills/hunt-nextjs/SKILL.md +299 -0
- package/bundled-skills/hunt-nodejs/SKILL.md +263 -0
- package/bundled-skills/hunt-nosqli/SKILL.md +210 -0
- package/bundled-skills/hunt-ntlm-info/SKILL.md +314 -0
- package/bundled-skills/hunt-oauth/SKILL.md +459 -0
- package/bundled-skills/hunt-open-redirect/SKILL.md +223 -0
- package/bundled-skills/hunt-race-condition/SKILL.md +381 -0
- package/bundled-skills/hunt-race-condition/references/details.md +159 -0
- package/bundled-skills/hunt-rag-vector/SKILL.md +212 -0
- package/bundled-skills/hunt-rce/SKILL.md +444 -0
- package/bundled-skills/hunt-rce/references/details.md +110 -0
- package/bundled-skills/hunt-saml/SKILL.md +156 -0
- package/bundled-skills/hunt-session/SKILL.md +342 -0
- package/bundled-skills/hunt-shadow-api/SKILL.md +198 -0
- package/bundled-skills/hunt-source-leak/SKILL.md +345 -0
- package/bundled-skills/hunt-spa-api/SKILL.md +163 -0
- package/bundled-skills/hunt-springboot/SKILL.md +285 -0
- package/bundled-skills/hunt-sqli/SKILL.md +466 -0
- package/bundled-skills/hunt-ssrf/SKILL.md +396 -0
- package/bundled-skills/hunt-ssrf/references/details.md +179 -0
- package/bundled-skills/hunt-ssti/SKILL.md +163 -0
- package/bundled-skills/hunt-subdomain/SKILL.md +379 -0
- package/bundled-skills/hunt-tls-network/SKILL.md +399 -0
- package/bundled-skills/hunt-xxe/SKILL.md +466 -0
- package/bundled-skills/i-have-adhd/SKILL.md +170 -0
- package/bundled-skills/idea-evaluator/SKILL.md +75 -0
- package/bundled-skills/idea-evaluator/idea-evaluator-con/SKILL.md +64 -0
- package/bundled-skills/idea-evaluator/idea-evaluator-pro/SKILL.md +64 -0
- package/bundled-skills/identity-access-management/SKILL.md +382 -0
- package/bundled-skills/identity-access-management/references/details.md +524 -0
- package/bundled-skills/incident-management/SKILL.md +484 -0
- package/bundled-skills/incident-response/SKILL.md +448 -0
- package/bundled-skills/incident-response/references/details.md +113 -0
- package/bundled-skills/interview-me/SKILL.md +248 -0
- package/bundled-skills/iso27001-compliance/SKILL.md +460 -0
- package/bundled-skills/jenkins/SKILL.md +462 -0
- package/bundled-skills/jev-use/SKILL.md +158 -0
- package/bundled-skills/kubernetes-hardening/SKILL.md +154 -0
- package/bundled-skills/kubernetes-ops/SKILL.md +449 -0
- package/bundled-skills/kubernetes-ops/references/details.md +108 -0
- package/bundled-skills/kustomize/SKILL.md +478 -0
- package/bundled-skills/ledger-tasks-yylo/SKILL.md +219 -0
- package/bundled-skills/linux-administration/SKILL.md +367 -0
- package/bundled-skills/linux-hardening/SKILL.md +154 -0
- package/bundled-skills/llm-app-security/SKILL.md +389 -0
- package/bundled-skills/llm-app-security/references/details.md +674 -0
- package/bundled-skills/llm-caching/SKILL.md +334 -0
- package/bundled-skills/llm-cost-optimization/SKILL.md +311 -0
- package/bundled-skills/llm-fine-tuning/SKILL.md +329 -0
- package/bundled-skills/llm-gateway/SKILL.md +282 -0
- package/bundled-skills/llm-inference-scaling/SKILL.md +286 -0
- package/bundled-skills/llmops-platform-engineering/SKILL.md +472 -0
- package/bundled-skills/load-balancing/SKILL.md +403 -0
- package/bundled-skills/loki-logging/SKILL.md +479 -0
- package/bundled-skills/loki-mode/examples/todo-app-generated/backend/package-lock.json +4 -4
- package/bundled-skills/loki-mode/examples/todo-app-generated/backend/package.json +1 -1
- package/bundled-skills/m365-entra-attack/SKILL.md +423 -0
- package/bundled-skills/mac-mini-llm-lab/SKILL.md +350 -0
- package/bundled-skills/mcp-server-security/SKILL.md +356 -0
- package/bundled-skills/mcp-server-security/references/details.md +745 -0
- package/bundled-skills/mdm-device-management/SKILL.md +404 -0
- package/bundled-skills/mdm-device-management/references/details.md +410 -0
- package/bundled-skills/meme-coin-audit/SKILL.md +402 -0
- package/bundled-skills/mid-engagement-ir-detection/SKILL.md +377 -0
- package/bundled-skills/model-registry-governance/SKILL.md +452 -0
- package/bundled-skills/model-serving-kubernetes/SKILL.md +339 -0
- package/bundled-skills/model-supply-chain-security/SKILL.md +427 -0
- package/bundled-skills/mongodb/SKILL.md +436 -0
- package/bundled-skills/multi-tenant-llm-hosting/SKILL.md +435 -0
- package/bundled-skills/multi-tenant-llm-hosting/references/details.md +211 -0
- package/bundled-skills/mysql/SKILL.md +390 -0
- package/bundled-skills/new-relic/SKILL.md +472 -0
- package/bundled-skills/nfs-storage/SKILL.md +356 -0
- package/bundled-skills/object-storage/SKILL.md +378 -0
- package/bundled-skills/offensive-osint/SKILL.md +443 -0
- package/bundled-skills/okta-attack/SKILL.md +436 -0
- package/bundled-skills/ollama-stack/SKILL.md +379 -0
- package/bundled-skills/openclaw-deployment-hardening/SKILL.md +135 -0
- package/bundled-skills/openclaw-local-mac-mini/SKILL.md +426 -0
- package/bundled-skills/openclaw-local-mac-mini/references/details.md +221 -0
- package/bundled-skills/openclaw-security-hardening/SKILL.md +135 -0
- package/bundled-skills/openshift/SKILL.md +485 -0
- package/bundled-skills/opentelemetry/SKILL.md +438 -0
- package/bundled-skills/opentelemetry/references/details.md +78 -0
- package/bundled-skills/opentofu-migration/SKILL.md +349 -0
- package/bundled-skills/osint-methodology/SKILL.md +460 -0
- package/bundled-skills/osint-methodology/references/details.md +1350 -0
- package/bundled-skills/pci-dss-compliance/SKILL.md +446 -0
- package/bundled-skills/penetration-testing/SKILL.md +152 -0
- package/bundled-skills/performance-tuning/SKILL.md +381 -0
- package/bundled-skills/plan-ledger-tasks-yylo/SKILL.md +52 -0
- package/bundled-skills/planetscale/SKILL.md +297 -0
- package/bundled-skills/platform-engineering/SKILL.md +348 -0
- package/bundled-skills/platform-engineering/references/details.md +944 -0
- package/bundled-skills/podman/SKILL.md +405 -0
- package/bundled-skills/policy-as-code/SKILL.md +434 -0
- package/bundled-skills/policy-as-code/references/details.md +204 -0
- package/bundled-skills/postgresql-devsec/SKILL.md +378 -0
- package/bundled-skills/prometheus-grafana/SKILL.md +469 -0
- package/bundled-skills/prompt-injection-defense/SKILL.md +483 -0
- package/bundled-skills/rag-infrastructure/SKILL.md +269 -0
- package/bundled-skills/rag-observability-evals/SKILL.md +444 -0
- package/bundled-skills/rag-observability-evals/references/details.md +92 -0
- package/bundled-skills/ralph-loop-yylo/SKILL.md +55 -0
- package/bundled-skills/ralph-loop-yylo/references/first_check.md +18 -0
- package/bundled-skills/ralph-loop-yylo/references/implement.md +60 -0
- package/bundled-skills/recon-scope-triage/SKILL.md +128 -0
- package/bundled-skills/redis/SKILL.md +421 -0
- package/bundled-skills/redteam-report-template/SKILL.md +370 -0
- package/bundled-skills/report-writing/SKILL.md +426 -0
- package/bundled-skills/report-writing/references/details.md +187 -0
- package/bundled-skills/resumable-implementation-contracts/SKILL.md +254 -0
- package/bundled-skills/reverse-proxy/SKILL.md +420 -0
- package/bundled-skills/runbook-creation/SKILL.md +438 -0
- package/bundled-skills/runbook-creation/references/details.md +71 -0
- package/bundled-skills/saas-security-posture/SKILL.md +415 -0
- package/bundled-skills/sast-scanning/SKILL.md +444 -0
- package/bundled-skills/sbom-supply-chain/SKILL.md +433 -0
- package/bundled-skills/security-arsenal/SKILL.md +446 -0
- package/bundled-skills/security-arsenal/references/details.md +540 -0
- package/bundled-skills/security-automation/SKILL.md +146 -0
- package/bundled-skills/semantic-versioning/SKILL.md +434 -0
- package/bundled-skills/semantic-versioning/references/details.md +83 -0
- package/bundled-skills/service-mesh/SKILL.md +422 -0
- package/bundled-skills/soc2-compliance/SKILL.md +409 -0
- package/bundled-skills/sops-encryption/SKILL.md +124 -0
- package/bundled-skills/sre-dashboards/SKILL.md +143 -0
- package/bundled-skills/ssh-configuration/SKILL.md +324 -0
- package/bundled-skills/ssl-tls-management/SKILL.md +428 -0
- package/bundled-skills/ssl-tls-management/references/details.md +99 -0
- package/bundled-skills/startup-it-troubleshooting/SKILL.md +415 -0
- package/bundled-skills/supply-chain-attack-recon/SKILL.md +453 -0
- package/bundled-skills/supply-chain-attack-recon/references/details.md +258 -0
- package/bundled-skills/systemd-services/SKILL.md +379 -0
- package/bundled-skills/terraform-aws/SKILL.md +125 -0
- package/bundled-skills/terraform-azure/SKILL.md +415 -0
- package/bundled-skills/terraform-azure/references/details.md +231 -0
- package/bundled-skills/terraform-gcp/SKILL.md +369 -0
- package/bundled-skills/threat-modeling/SKILL.md +487 -0
- package/bundled-skills/understand-project-yylo/SKILL.md +62 -0
- package/bundled-skills/user-management/SKILL.md +383 -0
- package/bundled-skills/using-agent-skills/SKILL.md +220 -0
- package/bundled-skills/vector-database-ops/SKILL.md +300 -0
- package/bundled-skills/vendor-management/SKILL.md +439 -0
- package/bundled-skills/vendor-management/references/details.md +109 -0
- package/bundled-skills/vercel-deployments/SKILL.md +296 -0
- package/bundled-skills/vllm-server/SKILL.md +236 -0
- package/bundled-skills/vmware-vcenter-attack/SKILL.md +412 -0
- package/bundled-skills/vpn-setup/SKILL.md +452 -0
- package/bundled-skills/vulnerability-scanning/SKILL.md +448 -0
- package/bundled-skills/waf-setup/SKILL.md +354 -0
- package/bundled-skills/waf-setup/references/details.md +211 -0
- package/bundled-skills/weather-model-data-fetching/SKILL.md +277 -0
- package/bundled-skills/weather-observation-fetching/SKILL.md +246 -0
- package/bundled-skills/web2-recon/SKILL.md +440 -0
- package/bundled-skills/web2-recon/references/details.md +319 -0
- package/bundled-skills/web3-audit/SKILL.md +445 -0
- package/bundled-skills/web3-audit/references/details.md +224 -0
- package/bundled-skills/wiki-yylo/SKILL.md +114 -0
- package/bundled-skills/windows-hardening/SKILL.md +454 -0
- package/bundled-skills/windows-hardening/references/details.md +204 -0
- package/bundled-skills/windows-server/SKILL.md +318 -0
- package/bundled-skills/workflow-yylo/SKILL.md +107 -0
- package/bundled-skills/zero-trust/SKILL.md +461 -0
- package/package.json +1 -1
- package/skills_index.json +6924 -0
|
@@ -0,0 +1,460 @@
|
|
|
1
|
+
---
|
|
2
|
+
name: git-workflow
|
|
3
|
+
description: Implement Git branching strategies, PR workflows, and release management
|
|
4
|
+
patterns.
|
|
5
|
+
category: devops
|
|
6
|
+
risk: critical
|
|
7
|
+
source: https://github.com/BagelHole/DevOps-Security-Agent-Skills
|
|
8
|
+
source_repo: BagelHole/DevOps-Security-Agent-Skills
|
|
9
|
+
source_type: community
|
|
10
|
+
date_added: '2026-09-20'
|
|
11
|
+
license: MIT
|
|
12
|
+
license_source: https://github.com/BagelHole/DevOps-Security-Agent-Skills/blob/main/LICENSE
|
|
13
|
+
compatibility: Requires the relevant platform CLIs (kubectl, helm, terraform, git,
|
|
14
|
+
CI runners) and authorized access to the target environment. Docs-only; helper scripts
|
|
15
|
+
and templates not bundled.
|
|
16
|
+
metadata:
|
|
17
|
+
author: devops-skills
|
|
18
|
+
version: '1.0'
|
|
19
|
+
---
|
|
20
|
+
|
|
21
|
+
# Git Workflow
|
|
22
|
+
|
|
23
|
+
Implement effective branching strategies and pull request workflows for team collaboration.
|
|
24
|
+
|
|
25
|
+
## When to Use This Skill
|
|
26
|
+
|
|
27
|
+
Use this skill when:
|
|
28
|
+
- Establishing team Git workflows
|
|
29
|
+
- Implementing branching strategies
|
|
30
|
+
- Configuring pull request processes
|
|
31
|
+
- Setting up release management
|
|
32
|
+
- Improving code review practices
|
|
33
|
+
|
|
34
|
+
## Prerequisites
|
|
35
|
+
|
|
36
|
+
- Git installed
|
|
37
|
+
- Repository hosting (GitHub, GitLab, Bitbucket)
|
|
38
|
+
- Basic Git knowledge
|
|
39
|
+
|
|
40
|
+
## Branching Strategies
|
|
41
|
+
|
|
42
|
+
### Trunk-Based Development
|
|
43
|
+
|
|
44
|
+
Best for: Continuous deployment, small teams, mature CI/CD
|
|
45
|
+
|
|
46
|
+
```
|
|
47
|
+
main ─────●─────●─────●─────●─────●─────●─────●
|
|
48
|
+
│ │ │ │ │ │
|
|
49
|
+
└─● └─● └─● └─● └─● └─●
|
|
50
|
+
feature branches (short-lived)
|
|
51
|
+
```
|
|
52
|
+
|
|
53
|
+
```bash
|
|
54
|
+
# Create short-lived feature branch
|
|
55
|
+
git checkout main
|
|
56
|
+
git pull origin main
|
|
57
|
+
git checkout -b feature/add-login
|
|
58
|
+
|
|
59
|
+
# Work and commit frequently
|
|
60
|
+
git add .
|
|
61
|
+
git commit -m "feat: add login form"
|
|
62
|
+
|
|
63
|
+
# Keep branch updated
|
|
64
|
+
git fetch origin
|
|
65
|
+
git rebase origin/main
|
|
66
|
+
|
|
67
|
+
# Merge quickly (same day ideally)
|
|
68
|
+
git checkout main
|
|
69
|
+
git pull origin main
|
|
70
|
+
git merge feature/add-login
|
|
71
|
+
git push origin main
|
|
72
|
+
git branch -d feature/add-login
|
|
73
|
+
```
|
|
74
|
+
|
|
75
|
+
### GitHub Flow
|
|
76
|
+
|
|
77
|
+
Best for: Continuous delivery, web applications
|
|
78
|
+
|
|
79
|
+
```
|
|
80
|
+
main ─────●─────●───────────●─────────────●─────●
|
|
81
|
+
│ ↑ ↑ ↑
|
|
82
|
+
└───●───●───┘ │ │
|
|
83
|
+
feature/login │ │
|
|
84
|
+
│ │
|
|
85
|
+
└───●───●───●───●───────┘ │
|
|
86
|
+
feature/dashboard │
|
|
87
|
+
│
|
|
88
|
+
└───●─────────────────────────┘
|
|
89
|
+
hotfix/security-patch
|
|
90
|
+
```
|
|
91
|
+
|
|
92
|
+
```bash
|
|
93
|
+
# Create feature branch from main
|
|
94
|
+
git checkout main
|
|
95
|
+
git pull origin main
|
|
96
|
+
git checkout -b feature/user-dashboard
|
|
97
|
+
|
|
98
|
+
# Push and create PR
|
|
99
|
+
git push -u origin feature/user-dashboard
|
|
100
|
+
|
|
101
|
+
# After review, merge via PR (squash recommended)
|
|
102
|
+
# Delete branch after merge
|
|
103
|
+
```
|
|
104
|
+
|
|
105
|
+
### GitFlow
|
|
106
|
+
|
|
107
|
+
Best for: Scheduled releases, versioned products
|
|
108
|
+
|
|
109
|
+
```
|
|
110
|
+
main ────────●────────────────●──────────────●
|
|
111
|
+
↑ ↑ ↑
|
|
112
|
+
release ────────┼────●───●──────┼──────────────┼
|
|
113
|
+
│ │ │ │ │
|
|
114
|
+
develop ───●────●────┼───●──●───●───●───●───●──┼
|
|
115
|
+
│ │ │ │ │ │
|
|
116
|
+
feature ───┴─────────┘ │ │ │ │
|
|
117
|
+
│ │ │ │
|
|
118
|
+
hotfix ────────────────────┴───────┼───┼──────┘
|
|
119
|
+
│ │
|
|
120
|
+
feature ────────────────────────────┴───┘
|
|
121
|
+
```
|
|
122
|
+
|
|
123
|
+
```bash
|
|
124
|
+
# Initialize GitFlow
|
|
125
|
+
git flow init
|
|
126
|
+
|
|
127
|
+
# Start feature
|
|
128
|
+
git flow feature start user-auth
|
|
129
|
+
|
|
130
|
+
# Finish feature (merges to develop)
|
|
131
|
+
git flow feature finish user-auth
|
|
132
|
+
|
|
133
|
+
# Start release
|
|
134
|
+
git flow release start 1.0.0
|
|
135
|
+
|
|
136
|
+
# Finish release (merges to main and develop)
|
|
137
|
+
git flow release finish 1.0.0
|
|
138
|
+
|
|
139
|
+
# Hotfix
|
|
140
|
+
git flow hotfix start security-fix
|
|
141
|
+
git flow hotfix finish security-fix
|
|
142
|
+
```
|
|
143
|
+
|
|
144
|
+
## Commit Conventions
|
|
145
|
+
|
|
146
|
+
### Conventional Commits
|
|
147
|
+
|
|
148
|
+
```
|
|
149
|
+
<type>(<scope>): <description>
|
|
150
|
+
|
|
151
|
+
[optional body]
|
|
152
|
+
|
|
153
|
+
[optional footer(s)]
|
|
154
|
+
```
|
|
155
|
+
|
|
156
|
+
Types:
|
|
157
|
+
- `feat`: New feature
|
|
158
|
+
- `fix`: Bug fix
|
|
159
|
+
- `docs`: Documentation
|
|
160
|
+
- `style`: Formatting
|
|
161
|
+
- `refactor`: Code restructuring
|
|
162
|
+
- `test`: Adding tests
|
|
163
|
+
- `chore`: Maintenance
|
|
164
|
+
|
|
165
|
+
Examples:
|
|
166
|
+
```bash
|
|
167
|
+
git commit -m "feat(auth): add OAuth2 login support"
|
|
168
|
+
git commit -m "fix(api): handle null response from payment service"
|
|
169
|
+
git commit -m "docs: update API documentation for v2 endpoints"
|
|
170
|
+
git commit -m "refactor(db): optimize user query performance"
|
|
171
|
+
|
|
172
|
+
# Breaking change
|
|
173
|
+
git commit -m "feat(api)!: change response format for user endpoint
|
|
174
|
+
|
|
175
|
+
BREAKING CHANGE: The user endpoint now returns an object instead of array"
|
|
176
|
+
```
|
|
177
|
+
|
|
178
|
+
### Commit Message Template
|
|
179
|
+
|
|
180
|
+
```bash
|
|
181
|
+
# Create template file ~/.gitmessage
|
|
182
|
+
# Subject line (50 chars max)
|
|
183
|
+
|
|
184
|
+
# Body (72 chars per line max)
|
|
185
|
+
# - What changed
|
|
186
|
+
# - Why it changed
|
|
187
|
+
# - Any side effects
|
|
188
|
+
|
|
189
|
+
# Footer
|
|
190
|
+
# Fixes #123
|
|
191
|
+
# Co-authored-by: Name <email>
|
|
192
|
+
|
|
193
|
+
# Configure Git to use template
|
|
194
|
+
git config --global commit.template ~/.gitmessage
|
|
195
|
+
```
|
|
196
|
+
|
|
197
|
+
## Pull Request Workflow
|
|
198
|
+
|
|
199
|
+
### PR Template
|
|
200
|
+
|
|
201
|
+
```markdown
|
|
202
|
+
<!-- .github/pull_request_template.md -->
|
|
203
|
+
## Description
|
|
204
|
+
Brief description of changes
|
|
205
|
+
|
|
206
|
+
## Type of Change
|
|
207
|
+
- [ ] Bug fix (non-breaking change)
|
|
208
|
+
- [ ] New feature (non-breaking change)
|
|
209
|
+
- [ ] Breaking change
|
|
210
|
+
- [ ] Documentation update
|
|
211
|
+
|
|
212
|
+
## Testing
|
|
213
|
+
- [ ] Unit tests added/updated
|
|
214
|
+
- [ ] Integration tests added/updated
|
|
215
|
+
- [ ] Manual testing performed
|
|
216
|
+
|
|
217
|
+
## Checklist
|
|
218
|
+
- [ ] Code follows project style guidelines
|
|
219
|
+
- [ ] Self-review performed
|
|
220
|
+
- [ ] Documentation updated
|
|
221
|
+
- [ ] No new warnings introduced
|
|
222
|
+
|
|
223
|
+
## Related Issues
|
|
224
|
+
Closes #
|
|
225
|
+
|
|
226
|
+
## Screenshots (if applicable)
|
|
227
|
+
```
|
|
228
|
+
|
|
229
|
+
### Branch Protection Rules
|
|
230
|
+
|
|
231
|
+
```yaml
|
|
232
|
+
# GitHub branch protection
|
|
233
|
+
branch_protection:
|
|
234
|
+
branch: main
|
|
235
|
+
required_pull_request_reviews:
|
|
236
|
+
required_approving_review_count: 1
|
|
237
|
+
dismiss_stale_reviews: true
|
|
238
|
+
require_code_owner_reviews: true
|
|
239
|
+
required_status_checks:
|
|
240
|
+
strict: true
|
|
241
|
+
contexts:
|
|
242
|
+
- "ci/tests"
|
|
243
|
+
- "ci/lint"
|
|
244
|
+
restrictions:
|
|
245
|
+
users: []
|
|
246
|
+
teams: ["maintainers"]
|
|
247
|
+
enforce_admins: true
|
|
248
|
+
required_linear_history: true
|
|
249
|
+
allow_force_pushes: false
|
|
250
|
+
allow_deletions: false
|
|
251
|
+
```
|
|
252
|
+
|
|
253
|
+
### Code Owners
|
|
254
|
+
|
|
255
|
+
```
|
|
256
|
+
# .github/CODEOWNERS
|
|
257
|
+
|
|
258
|
+
# Default owners
|
|
259
|
+
* @team-leads
|
|
260
|
+
|
|
261
|
+
# Frontend code
|
|
262
|
+
/src/frontend/ @frontend-team
|
|
263
|
+
*.tsx @frontend-team
|
|
264
|
+
*.css @frontend-team
|
|
265
|
+
|
|
266
|
+
# Backend code
|
|
267
|
+
/src/api/ @backend-team
|
|
268
|
+
/src/services/ @backend-team
|
|
269
|
+
|
|
270
|
+
# Infrastructure
|
|
271
|
+
/terraform/ @platform-team
|
|
272
|
+
/k8s/ @platform-team
|
|
273
|
+
Dockerfile @platform-team
|
|
274
|
+
|
|
275
|
+
# Documentation
|
|
276
|
+
/docs/ @tech-writers
|
|
277
|
+
*.md @tech-writers
|
|
278
|
+
```
|
|
279
|
+
|
|
280
|
+
## Git Hooks
|
|
281
|
+
|
|
282
|
+
### Pre-commit Hook
|
|
283
|
+
|
|
284
|
+
```bash
|
|
285
|
+
#!/bin/sh
|
|
286
|
+
# .git/hooks/pre-commit
|
|
287
|
+
|
|
288
|
+
# Run linting
|
|
289
|
+
npm run lint
|
|
290
|
+
if [ $? -ne 0 ]; then
|
|
291
|
+
echo "Linting failed. Fix errors before committing."
|
|
292
|
+
exit 1
|
|
293
|
+
fi
|
|
294
|
+
|
|
295
|
+
# Run tests
|
|
296
|
+
npm run test:unit
|
|
297
|
+
if [ $? -ne 0 ]; then
|
|
298
|
+
echo "Tests failed. Fix tests before committing."
|
|
299
|
+
exit 1
|
|
300
|
+
fi
|
|
301
|
+
|
|
302
|
+
# Check for debug statements
|
|
303
|
+
if grep -r "console.log\|debugger\|binding.pry" --include="*.js" --include="*.ts" --include="*.rb" src/; then
|
|
304
|
+
echo "Remove debug statements before committing."
|
|
305
|
+
exit 1
|
|
306
|
+
fi
|
|
307
|
+
```
|
|
308
|
+
|
|
309
|
+
### Using Husky
|
|
310
|
+
|
|
311
|
+
```json
|
|
312
|
+
// package.json
|
|
313
|
+
{
|
|
314
|
+
"husky": {
|
|
315
|
+
"hooks": {
|
|
316
|
+
"pre-commit": "lint-staged",
|
|
317
|
+
"commit-msg": "commitlint -E HUSKY_GIT_PARAMS"
|
|
318
|
+
}
|
|
319
|
+
},
|
|
320
|
+
"lint-staged": {
|
|
321
|
+
"*.{js,ts,tsx}": ["eslint --fix", "prettier --write"],
|
|
322
|
+
"*.{css,scss}": ["prettier --write"]
|
|
323
|
+
}
|
|
324
|
+
}
|
|
325
|
+
```
|
|
326
|
+
|
|
327
|
+
### Commitlint Configuration
|
|
328
|
+
|
|
329
|
+
```javascript
|
|
330
|
+
// commitlint.config.js
|
|
331
|
+
module.exports = {
|
|
332
|
+
extends: ['@commitlint/config-conventional'],
|
|
333
|
+
rules: {
|
|
334
|
+
'type-enum': [
|
|
335
|
+
2,
|
|
336
|
+
'always',
|
|
337
|
+
['feat', 'fix', 'docs', 'style', 'refactor', 'test', 'chore', 'revert']
|
|
338
|
+
],
|
|
339
|
+
'subject-max-length': [2, 'always', 72],
|
|
340
|
+
'body-max-line-length': [2, 'always', 100]
|
|
341
|
+
}
|
|
342
|
+
};
|
|
343
|
+
```
|
|
344
|
+
|
|
345
|
+
## Release Workflow
|
|
346
|
+
|
|
347
|
+
### Automated Release with Tags
|
|
348
|
+
|
|
349
|
+
```bash
|
|
350
|
+
# Create annotated tag
|
|
351
|
+
git tag -a v1.0.0 -m "Release version 1.0.0"
|
|
352
|
+
|
|
353
|
+
# Push tag
|
|
354
|
+
git push origin v1.0.0
|
|
355
|
+
|
|
356
|
+
# Create release from tag (GitHub CLI)
|
|
357
|
+
gh release create v1.0.0 \
|
|
358
|
+
--title "Release 1.0.0" \
|
|
359
|
+
--notes "Release notes here" \
|
|
360
|
+
--target main
|
|
361
|
+
```
|
|
362
|
+
|
|
363
|
+
### Changelog Generation
|
|
364
|
+
|
|
365
|
+
```bash
|
|
366
|
+
# Using conventional-changelog
|
|
367
|
+
npx conventional-changelog -p angular -i CHANGELOG.md -s
|
|
368
|
+
|
|
369
|
+
# Using git-cliff
|
|
370
|
+
git cliff -o CHANGELOG.md
|
|
371
|
+
```
|
|
372
|
+
|
|
373
|
+
## Common Git Operations
|
|
374
|
+
|
|
375
|
+
### Rebase vs Merge
|
|
376
|
+
|
|
377
|
+
```bash
|
|
378
|
+
# Rebase (clean history)
|
|
379
|
+
git checkout feature/my-feature
|
|
380
|
+
git rebase main
|
|
381
|
+
git push --force-with-lease
|
|
382
|
+
|
|
383
|
+
# Merge (preserve history)
|
|
384
|
+
git checkout main
|
|
385
|
+
git merge feature/my-feature
|
|
386
|
+
|
|
387
|
+
# Squash merge (single commit)
|
|
388
|
+
git merge --squash feature/my-feature
|
|
389
|
+
git commit -m "feat: add feature X"
|
|
390
|
+
```
|
|
391
|
+
|
|
392
|
+
### Cherry Pick
|
|
393
|
+
|
|
394
|
+
```bash
|
|
395
|
+
# Apply specific commit to current branch
|
|
396
|
+
git cherry-pick abc123
|
|
397
|
+
|
|
398
|
+
# Cherry pick range
|
|
399
|
+
git cherry-pick abc123..def456
|
|
400
|
+
|
|
401
|
+
# Cherry pick without committing
|
|
402
|
+
git cherry-pick -n abc123
|
|
403
|
+
```
|
|
404
|
+
|
|
405
|
+
### Interactive Rebase
|
|
406
|
+
|
|
407
|
+
```bash
|
|
408
|
+
# Clean up last 3 commits
|
|
409
|
+
git rebase -i HEAD~3
|
|
410
|
+
|
|
411
|
+
# In editor:
|
|
412
|
+
# pick abc123 First commit
|
|
413
|
+
# squash def456 Second commit
|
|
414
|
+
# reword ghi789 Third commit
|
|
415
|
+
```
|
|
416
|
+
|
|
417
|
+
## Common Issues
|
|
418
|
+
|
|
419
|
+
### Issue: Merge Conflicts
|
|
420
|
+
**Problem**: Conflicts when merging branches
|
|
421
|
+
**Solution**: Rebase frequently, communicate with team, use smaller PRs
|
|
422
|
+
|
|
423
|
+
### Issue: Diverged Branches
|
|
424
|
+
**Problem**: Local branch far behind remote
|
|
425
|
+
**Solution**: `git pull --rebase` or `git fetch && git rebase origin/main`
|
|
426
|
+
|
|
427
|
+
### Issue: Accidental Commit to Wrong Branch
|
|
428
|
+
**Problem**: Committed to main instead of feature
|
|
429
|
+
**Solution**: `git reset HEAD~1`, checkout correct branch, recommit
|
|
430
|
+
|
|
431
|
+
## Best Practices
|
|
432
|
+
|
|
433
|
+
- Keep branches short-lived (< 1 week)
|
|
434
|
+
- Write meaningful commit messages
|
|
435
|
+
- Use PR templates consistently
|
|
436
|
+
- Require code reviews
|
|
437
|
+
- Protect main/master branch
|
|
438
|
+
- Automate checks with CI
|
|
439
|
+
- Squash merge for clean history
|
|
440
|
+
- Delete branches after merge
|
|
441
|
+
|
|
442
|
+
## Related Skills
|
|
443
|
+
|
|
444
|
+
- semantic-versioning (`semantic-versioning`) - Version management
|
|
445
|
+
- github-actions (`github-actions`) - CI/CD automation
|
|
446
|
+
- feature-flags (`feature-flags`) - Feature management
|
|
447
|
+
|
|
448
|
+
## Limitations
|
|
449
|
+
|
|
450
|
+
- Guidance executes against real environments: confirm target, blast radius, and rollback plan before applying anything.
|
|
451
|
+
- Never deploy to production without explicit approval. Docs-only import: upstream scripts and templates not bundled.
|
|
452
|
+
|
|
453
|
+
### Example
|
|
454
|
+
|
|
455
|
+
```bash
|
|
456
|
+
git status && git diff --stat
|
|
457
|
+
kubectl diff -f manifest.yaml
|
|
458
|
+
```
|
|
459
|
+
|
|
460
|
+
> Adapted from [BagelHole/DevOps-Security-Agent-Skills](https://github.com/BagelHole/DevOps-Security-Agent-Skills) (MIT); frontmatter, When to Use/Limitations, and safety boundaries added for upstream compliance. Docs-only import: helper scripts and templates not bundled.
|