opencode-skills-collection 4.0.68 → 4.0.69

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (309) hide show
  1. package/bundled-skills/.antigravity-install-manifest.json +266 -1
  2. package/bundled-skills/access-review/SKILL.md +394 -0
  3. package/bundled-skills/access-review/references/details.md +121 -0
  4. package/bundled-skills/agent-evals/SKILL.md +420 -0
  5. package/bundled-skills/agent-observability/SKILL.md +346 -0
  6. package/bundled-skills/agent-observability/references/details.md +786 -0
  7. package/bundled-skills/ai-agent-security/SKILL.md +393 -0
  8. package/bundled-skills/ai-agent-security/references/details.md +912 -0
  9. package/bundled-skills/ai-coding-agent-guardrails/SKILL.md +442 -0
  10. package/bundled-skills/ai-coding-agent-guardrails/references/details.md +753 -0
  11. package/bundled-skills/ai-inference-service-mesh/SKILL.md +449 -0
  12. package/bundled-skills/ai-pipeline-orchestration/SKILL.md +287 -0
  13. package/bundled-skills/ai-red-teaming/SKILL.md +409 -0
  14. package/bundled-skills/ai-security-hardening/SKILL.md +343 -0
  15. package/bundled-skills/ai-sre-incident-response/SKILL.md +336 -0
  16. package/bundled-skills/alerting-oncall/SKILL.md +458 -0
  17. package/bundled-skills/alerting-oncall/references/details.md +84 -0
  18. package/bundled-skills/apk-redteam-pipeline/SKILL.md +446 -0
  19. package/bundled-skills/argocd-gitops/SKILL.md +469 -0
  20. package/bundled-skills/arm-templates/SKILL.md +438 -0
  21. package/bundled-skills/arm-templates/references/details.md +64 -0
  22. package/bundled-skills/asset-inventory/SKILL.md +412 -0
  23. package/bundled-skills/asset-inventory/references/details.md +127 -0
  24. package/bundled-skills/audit-logging/SKILL.md +476 -0
  25. package/bundled-skills/aws-cloudtrail/SKILL.md +486 -0
  26. package/bundled-skills/aws-cost-optimization/SKILL.md +331 -0
  27. package/bundled-skills/aws-ec2/SKILL.md +426 -0
  28. package/bundled-skills/aws-ecs-fargate/SKILL.md +388 -0
  29. package/bundled-skills/aws-iam/SKILL.md +463 -0
  30. package/bundled-skills/aws-lambda/SKILL.md +428 -0
  31. package/bundled-skills/aws-rds/SKILL.md +380 -0
  32. package/bundled-skills/aws-s3/SKILL.md +434 -0
  33. package/bundled-skills/aws-secrets-manager/SKILL.md +486 -0
  34. package/bundled-skills/aws-vpc/SKILL.md +436 -0
  35. package/bundled-skills/azure-ai-document-intelligence-ts/SKILL.md +1 -1
  36. package/bundled-skills/azure-aks/SKILL.md +423 -0
  37. package/bundled-skills/azure-devops/SKILL.md +457 -0
  38. package/bundled-skills/azure-functions-devsec/SKILL.md +436 -0
  39. package/bundled-skills/azure-keyvault/SKILL.md +455 -0
  40. package/bundled-skills/azure-keyvault/references/details.md +83 -0
  41. package/bundled-skills/azure-monitor-audit/SKILL.md +379 -0
  42. package/bundled-skills/azure-networking/SKILL.md +448 -0
  43. package/bundled-skills/azure-networking/references/details.md +135 -0
  44. package/bundled-skills/azure-sql/SKILL.md +413 -0
  45. package/bundled-skills/azure-sql/references/details.md +113 -0
  46. package/bundled-skills/azure-vms/SKILL.md +402 -0
  47. package/bundled-skills/azure-vms/references/details.md +134 -0
  48. package/bundled-skills/backup-recovery/SKILL.md +388 -0
  49. package/bundled-skills/bb-methodology/SKILL.md +451 -0
  50. package/bundled-skills/bb-methodology/references/details.md +120 -0
  51. package/bundled-skills/block-storage/SKILL.md +371 -0
  52. package/bundled-skills/blue-green-deploy/SKILL.md +453 -0
  53. package/bundled-skills/blue-green-deploy/references/details.md +90 -0
  54. package/bundled-skills/bug-bounty/SKILL.md +447 -0
  55. package/bundled-skills/bug-bounty/references/details.md +1316 -0
  56. package/bundled-skills/bugcrowd-reporting/SKILL.md +351 -0
  57. package/bundled-skills/business-continuity/SKILL.md +463 -0
  58. package/bundled-skills/career-ops/SKILL.md +186 -0
  59. package/bundled-skills/cdn-setup/SKILL.md +374 -0
  60. package/bundled-skills/change-management/SKILL.md +438 -0
  61. package/bundled-skills/change-management/references/details.md +105 -0
  62. package/bundled-skills/circleci/SKILL.md +475 -0
  63. package/bundled-skills/cis-benchmarks/SKILL.md +150 -0
  64. package/bundled-skills/cloudflare-pages/SKILL.md +318 -0
  65. package/bundled-skills/cloudflare-r2/SKILL.md +353 -0
  66. package/bundled-skills/cloudflare-workers/SKILL.md +415 -0
  67. package/bundled-skills/cloudflare-zero-trust/SKILL.md +361 -0
  68. package/bundled-skills/cloudformation/SKILL.md +461 -0
  69. package/bundled-skills/constraint-driven-development/SKILL.md +335 -0
  70. package/bundled-skills/constraint-driven-development/references/floor-guard.md +99 -0
  71. package/bundled-skills/container-hardening/SKILL.md +126 -0
  72. package/bundled-skills/container-registries/SKILL.md +435 -0
  73. package/bundled-skills/container-scanning/SKILL.md +416 -0
  74. package/bundled-skills/convex-backend/SKILL.md +338 -0
  75. package/bundled-skills/dast-scanning/SKILL.md +437 -0
  76. package/bundled-skills/database-backups/SKILL.md +425 -0
  77. package/bundled-skills/datadog/SKILL.md +487 -0
  78. package/bundled-skills/dependency-scanning/SKILL.md +457 -0
  79. package/bundled-skills/devcontainers-nix/SKILL.md +416 -0
  80. package/bundled-skills/disaster-recovery/SKILL.md +374 -0
  81. package/bundled-skills/disaster-recovery/references/details.md +219 -0
  82. package/bundled-skills/dns-management/SKILL.md +375 -0
  83. package/bundled-skills/docker-compose/SKILL.md +482 -0
  84. package/bundled-skills/docker-management/SKILL.md +426 -0
  85. package/bundled-skills/ebpf-observability/SKILL.md +436 -0
  86. package/bundled-skills/ebpf-observability/references/details.md +542 -0
  87. package/bundled-skills/elk-stack/SKILL.md +487 -0
  88. package/bundled-skills/enterprise-vpn-attack/SKILL.md +395 -0
  89. package/bundled-skills/evidence-hygiene/SKILL.md +404 -0
  90. package/bundled-skills/feature-flags/SKILL.md +426 -0
  91. package/bundled-skills/feature-flags/references/details.md +86 -0
  92. package/bundled-skills/fedramp-compliance/SKILL.md +453 -0
  93. package/bundled-skills/firebase-app-platform/SKILL.md +381 -0
  94. package/bundled-skills/firewall-config/SKILL.md +479 -0
  95. package/bundled-skills/gcp-audit-logs/SKILL.md +452 -0
  96. package/bundled-skills/gcp-audit-logs/references/details.md +56 -0
  97. package/bundled-skills/gcp-cloud-functions/SKILL.md +284 -0
  98. package/bundled-skills/gcp-cloud-sql/SKILL.md +277 -0
  99. package/bundled-skills/gcp-compute/SKILL.md +319 -0
  100. package/bundled-skills/gcp-gke/SKILL.md +307 -0
  101. package/bundled-skills/gcp-networking/SKILL.md +293 -0
  102. package/bundled-skills/gcp-secret-manager/SKILL.md +421 -0
  103. package/bundled-skills/gcp-secret-manager/references/details.md +131 -0
  104. package/bundled-skills/gdpr-compliance/SKILL.md +451 -0
  105. package/bundled-skills/gdpr-compliance/references/details.md +145 -0
  106. package/bundled-skills/geo-audit/SKILL.md +368 -0
  107. package/bundled-skills/geo-brand-mentions/SKILL.md +68 -0
  108. package/bundled-skills/geo-brand-mentions/references/details.md +471 -0
  109. package/bundled-skills/geo-citability/SKILL.md +350 -0
  110. package/bundled-skills/geo-compare/SKILL.md +340 -0
  111. package/bundled-skills/geo-content/SKILL.md +383 -0
  112. package/bundled-skills/geo-crawlers/SKILL.md +408 -0
  113. package/bundled-skills/geo-llmstxt/SKILL.md +464 -0
  114. package/bundled-skills/geo-platform-optimizer/SKILL.md +314 -0
  115. package/bundled-skills/geo-proposal/SKILL.md +378 -0
  116. package/bundled-skills/geo-prospect/SKILL.md +225 -0
  117. package/bundled-skills/geo-report/SKILL.md +436 -0
  118. package/bundled-skills/geo-report-pdf/SKILL.md +157 -0
  119. package/bundled-skills/geo-schema/SKILL.md +408 -0
  120. package/bundled-skills/geo-technical/SKILL.md +78 -0
  121. package/bundled-skills/geo-technical/references/details.md +543 -0
  122. package/bundled-skills/git-workflow/SKILL.md +460 -0
  123. package/bundled-skills/github-actions/SKILL.md +368 -0
  124. package/bundled-skills/gitlab-ci/SKILL.md +340 -0
  125. package/bundled-skills/gpu-kubernetes-operations/SKILL.md +468 -0
  126. package/bundled-skills/gpu-server-management/SKILL.md +236 -0
  127. package/bundled-skills/hashicorp-vault/SKILL.md +408 -0
  128. package/bundled-skills/helm-charts/SKILL.md +469 -0
  129. package/bundled-skills/hipaa-compliance/SKILL.md +451 -0
  130. package/bundled-skills/hunt-aspnet/SKILL.md +321 -0
  131. package/bundled-skills/hunt-ato/SKILL.md +184 -0
  132. package/bundled-skills/hunt-auth-bypass/SKILL.md +426 -0
  133. package/bundled-skills/hunt-auth-bypass/references/details.md +80 -0
  134. package/bundled-skills/hunt-brute-force/SKILL.md +341 -0
  135. package/bundled-skills/hunt-business-logic/SKILL.md +281 -0
  136. package/bundled-skills/hunt-cache-poison/SKILL.md +382 -0
  137. package/bundled-skills/hunt-captcha-bypass/SKILL.md +136 -0
  138. package/bundled-skills/hunt-cicd/SKILL.md +311 -0
  139. package/bundled-skills/hunt-clickjacking/SKILL.md +110 -0
  140. package/bundled-skills/hunt-cors/SKILL.md +335 -0
  141. package/bundled-skills/hunt-dom/SKILL.md +323 -0
  142. package/bundled-skills/hunt-exceptional-conditions/SKILL.md +111 -0
  143. package/bundled-skills/hunt-file-upload/SKILL.md +202 -0
  144. package/bundled-skills/hunt-fintech-graphql/SKILL.md +289 -0
  145. package/bundled-skills/hunt-forgot-password/SKILL.md +114 -0
  146. package/bundled-skills/hunt-grpc/SKILL.md +317 -0
  147. package/bundled-skills/hunt-host-header/SKILL.md +309 -0
  148. package/bundled-skills/hunt-html-injection/SKILL.md +106 -0
  149. package/bundled-skills/hunt-http-smuggling/SKILL.md +129 -0
  150. package/bundled-skills/hunt-http-smuggling/references/phase2h-smuggling-cachepoison.md +177 -0
  151. package/bundled-skills/hunt-idor/SKILL.md +434 -0
  152. package/bundled-skills/hunt-jwt-crypto/SKILL.md +221 -0
  153. package/bundled-skills/hunt-k8s/SKILL.md +337 -0
  154. package/bundled-skills/hunt-laravel/SKILL.md +255 -0
  155. package/bundled-skills/hunt-ldap/SKILL.md +351 -0
  156. package/bundled-skills/hunt-lfi/SKILL.md +311 -0
  157. package/bundled-skills/hunt-llm-ai/SKILL.md +289 -0
  158. package/bundled-skills/hunt-mfa-bypass/SKILL.md +177 -0
  159. package/bundled-skills/hunt-misc/SKILL.md +378 -0
  160. package/bundled-skills/hunt-nextjs/SKILL.md +299 -0
  161. package/bundled-skills/hunt-nodejs/SKILL.md +263 -0
  162. package/bundled-skills/hunt-nosqli/SKILL.md +210 -0
  163. package/bundled-skills/hunt-ntlm-info/SKILL.md +314 -0
  164. package/bundled-skills/hunt-oauth/SKILL.md +459 -0
  165. package/bundled-skills/hunt-open-redirect/SKILL.md +223 -0
  166. package/bundled-skills/hunt-race-condition/SKILL.md +381 -0
  167. package/bundled-skills/hunt-race-condition/references/details.md +159 -0
  168. package/bundled-skills/hunt-rag-vector/SKILL.md +212 -0
  169. package/bundled-skills/hunt-rce/SKILL.md +444 -0
  170. package/bundled-skills/hunt-rce/references/details.md +110 -0
  171. package/bundled-skills/hunt-saml/SKILL.md +156 -0
  172. package/bundled-skills/hunt-session/SKILL.md +342 -0
  173. package/bundled-skills/hunt-shadow-api/SKILL.md +198 -0
  174. package/bundled-skills/hunt-source-leak/SKILL.md +345 -0
  175. package/bundled-skills/hunt-spa-api/SKILL.md +163 -0
  176. package/bundled-skills/hunt-springboot/SKILL.md +285 -0
  177. package/bundled-skills/hunt-sqli/SKILL.md +466 -0
  178. package/bundled-skills/hunt-ssrf/SKILL.md +396 -0
  179. package/bundled-skills/hunt-ssrf/references/details.md +179 -0
  180. package/bundled-skills/hunt-ssti/SKILL.md +163 -0
  181. package/bundled-skills/hunt-subdomain/SKILL.md +379 -0
  182. package/bundled-skills/hunt-tls-network/SKILL.md +399 -0
  183. package/bundled-skills/hunt-xxe/SKILL.md +466 -0
  184. package/bundled-skills/i-have-adhd/SKILL.md +170 -0
  185. package/bundled-skills/identity-access-management/SKILL.md +382 -0
  186. package/bundled-skills/identity-access-management/references/details.md +524 -0
  187. package/bundled-skills/incident-management/SKILL.md +484 -0
  188. package/bundled-skills/incident-response/SKILL.md +448 -0
  189. package/bundled-skills/incident-response/references/details.md +113 -0
  190. package/bundled-skills/interview-me/SKILL.md +248 -0
  191. package/bundled-skills/iso27001-compliance/SKILL.md +460 -0
  192. package/bundled-skills/jenkins/SKILL.md +462 -0
  193. package/bundled-skills/jev-use/SKILL.md +158 -0
  194. package/bundled-skills/kubernetes-hardening/SKILL.md +154 -0
  195. package/bundled-skills/kubernetes-ops/SKILL.md +449 -0
  196. package/bundled-skills/kubernetes-ops/references/details.md +108 -0
  197. package/bundled-skills/kustomize/SKILL.md +478 -0
  198. package/bundled-skills/linux-administration/SKILL.md +367 -0
  199. package/bundled-skills/linux-hardening/SKILL.md +154 -0
  200. package/bundled-skills/llm-app-security/SKILL.md +389 -0
  201. package/bundled-skills/llm-app-security/references/details.md +674 -0
  202. package/bundled-skills/llm-caching/SKILL.md +334 -0
  203. package/bundled-skills/llm-cost-optimization/SKILL.md +311 -0
  204. package/bundled-skills/llm-fine-tuning/SKILL.md +329 -0
  205. package/bundled-skills/llm-gateway/SKILL.md +282 -0
  206. package/bundled-skills/llm-inference-scaling/SKILL.md +286 -0
  207. package/bundled-skills/llmops-platform-engineering/SKILL.md +472 -0
  208. package/bundled-skills/load-balancing/SKILL.md +403 -0
  209. package/bundled-skills/loki-logging/SKILL.md +479 -0
  210. package/bundled-skills/m365-entra-attack/SKILL.md +423 -0
  211. package/bundled-skills/mac-mini-llm-lab/SKILL.md +350 -0
  212. package/bundled-skills/mcp-server-security/SKILL.md +356 -0
  213. package/bundled-skills/mcp-server-security/references/details.md +745 -0
  214. package/bundled-skills/mdm-device-management/SKILL.md +404 -0
  215. package/bundled-skills/mdm-device-management/references/details.md +410 -0
  216. package/bundled-skills/meme-coin-audit/SKILL.md +402 -0
  217. package/bundled-skills/mid-engagement-ir-detection/SKILL.md +377 -0
  218. package/bundled-skills/model-registry-governance/SKILL.md +452 -0
  219. package/bundled-skills/model-serving-kubernetes/SKILL.md +339 -0
  220. package/bundled-skills/model-supply-chain-security/SKILL.md +427 -0
  221. package/bundled-skills/mongodb/SKILL.md +436 -0
  222. package/bundled-skills/multi-tenant-llm-hosting/SKILL.md +435 -0
  223. package/bundled-skills/multi-tenant-llm-hosting/references/details.md +211 -0
  224. package/bundled-skills/mysql/SKILL.md +390 -0
  225. package/bundled-skills/new-relic/SKILL.md +472 -0
  226. package/bundled-skills/nfs-storage/SKILL.md +356 -0
  227. package/bundled-skills/object-storage/SKILL.md +378 -0
  228. package/bundled-skills/offensive-osint/SKILL.md +443 -0
  229. package/bundled-skills/okta-attack/SKILL.md +436 -0
  230. package/bundled-skills/ollama-stack/SKILL.md +379 -0
  231. package/bundled-skills/openclaw-deployment-hardening/SKILL.md +135 -0
  232. package/bundled-skills/openclaw-local-mac-mini/SKILL.md +426 -0
  233. package/bundled-skills/openclaw-local-mac-mini/references/details.md +221 -0
  234. package/bundled-skills/openclaw-security-hardening/SKILL.md +135 -0
  235. package/bundled-skills/openshift/SKILL.md +485 -0
  236. package/bundled-skills/opentelemetry/SKILL.md +438 -0
  237. package/bundled-skills/opentelemetry/references/details.md +78 -0
  238. package/bundled-skills/opentofu-migration/SKILL.md +349 -0
  239. package/bundled-skills/osint-methodology/SKILL.md +460 -0
  240. package/bundled-skills/osint-methodology/references/details.md +1350 -0
  241. package/bundled-skills/pci-dss-compliance/SKILL.md +446 -0
  242. package/bundled-skills/penetration-testing/SKILL.md +152 -0
  243. package/bundled-skills/performance-tuning/SKILL.md +381 -0
  244. package/bundled-skills/planetscale/SKILL.md +297 -0
  245. package/bundled-skills/platform-engineering/SKILL.md +348 -0
  246. package/bundled-skills/platform-engineering/references/details.md +944 -0
  247. package/bundled-skills/podman/SKILL.md +405 -0
  248. package/bundled-skills/policy-as-code/SKILL.md +434 -0
  249. package/bundled-skills/policy-as-code/references/details.md +204 -0
  250. package/bundled-skills/postgresql-devsec/SKILL.md +378 -0
  251. package/bundled-skills/prometheus-grafana/SKILL.md +469 -0
  252. package/bundled-skills/prompt-injection-defense/SKILL.md +483 -0
  253. package/bundled-skills/rag-infrastructure/SKILL.md +269 -0
  254. package/bundled-skills/rag-observability-evals/SKILL.md +444 -0
  255. package/bundled-skills/rag-observability-evals/references/details.md +92 -0
  256. package/bundled-skills/recon-scope-triage/SKILL.md +128 -0
  257. package/bundled-skills/redis/SKILL.md +421 -0
  258. package/bundled-skills/redteam-report-template/SKILL.md +370 -0
  259. package/bundled-skills/report-writing/SKILL.md +426 -0
  260. package/bundled-skills/report-writing/references/details.md +187 -0
  261. package/bundled-skills/reverse-proxy/SKILL.md +420 -0
  262. package/bundled-skills/runbook-creation/SKILL.md +438 -0
  263. package/bundled-skills/runbook-creation/references/details.md +71 -0
  264. package/bundled-skills/saas-security-posture/SKILL.md +415 -0
  265. package/bundled-skills/sast-scanning/SKILL.md +444 -0
  266. package/bundled-skills/sbom-supply-chain/SKILL.md +433 -0
  267. package/bundled-skills/security-arsenal/SKILL.md +446 -0
  268. package/bundled-skills/security-arsenal/references/details.md +540 -0
  269. package/bundled-skills/security-automation/SKILL.md +146 -0
  270. package/bundled-skills/semantic-versioning/SKILL.md +434 -0
  271. package/bundled-skills/semantic-versioning/references/details.md +83 -0
  272. package/bundled-skills/service-mesh/SKILL.md +422 -0
  273. package/bundled-skills/soc2-compliance/SKILL.md +409 -0
  274. package/bundled-skills/sops-encryption/SKILL.md +124 -0
  275. package/bundled-skills/sre-dashboards/SKILL.md +143 -0
  276. package/bundled-skills/ssh-configuration/SKILL.md +324 -0
  277. package/bundled-skills/ssl-tls-management/SKILL.md +428 -0
  278. package/bundled-skills/ssl-tls-management/references/details.md +99 -0
  279. package/bundled-skills/startup-it-troubleshooting/SKILL.md +415 -0
  280. package/bundled-skills/supply-chain-attack-recon/SKILL.md +453 -0
  281. package/bundled-skills/supply-chain-attack-recon/references/details.md +258 -0
  282. package/bundled-skills/systemd-services/SKILL.md +379 -0
  283. package/bundled-skills/terraform-aws/SKILL.md +125 -0
  284. package/bundled-skills/terraform-azure/SKILL.md +415 -0
  285. package/bundled-skills/terraform-azure/references/details.md +231 -0
  286. package/bundled-skills/terraform-gcp/SKILL.md +369 -0
  287. package/bundled-skills/threat-modeling/SKILL.md +487 -0
  288. package/bundled-skills/user-management/SKILL.md +383 -0
  289. package/bundled-skills/using-agent-skills/SKILL.md +220 -0
  290. package/bundled-skills/vector-database-ops/SKILL.md +300 -0
  291. package/bundled-skills/vendor-management/SKILL.md +439 -0
  292. package/bundled-skills/vendor-management/references/details.md +109 -0
  293. package/bundled-skills/vercel-deployments/SKILL.md +296 -0
  294. package/bundled-skills/vllm-server/SKILL.md +236 -0
  295. package/bundled-skills/vmware-vcenter-attack/SKILL.md +412 -0
  296. package/bundled-skills/vpn-setup/SKILL.md +452 -0
  297. package/bundled-skills/vulnerability-scanning/SKILL.md +448 -0
  298. package/bundled-skills/waf-setup/SKILL.md +354 -0
  299. package/bundled-skills/waf-setup/references/details.md +211 -0
  300. package/bundled-skills/web2-recon/SKILL.md +440 -0
  301. package/bundled-skills/web2-recon/references/details.md +319 -0
  302. package/bundled-skills/web3-audit/SKILL.md +445 -0
  303. package/bundled-skills/web3-audit/references/details.md +224 -0
  304. package/bundled-skills/windows-hardening/SKILL.md +454 -0
  305. package/bundled-skills/windows-hardening/references/details.md +204 -0
  306. package/bundled-skills/windows-server/SKILL.md +318 -0
  307. package/bundled-skills/zero-trust/SKILL.md +461 -0
  308. package/package.json +1 -1
  309. package/skills_index.json +6943 -323
@@ -0,0 +1,460 @@
1
+ ---
2
+ name: git-workflow
3
+ description: Implement Git branching strategies, PR workflows, and release management
4
+ patterns.
5
+ category: devops
6
+ risk: critical
7
+ source: https://github.com/BagelHole/DevOps-Security-Agent-Skills
8
+ source_repo: BagelHole/DevOps-Security-Agent-Skills
9
+ source_type: community
10
+ date_added: '2026-09-20'
11
+ license: MIT
12
+ license_source: https://github.com/BagelHole/DevOps-Security-Agent-Skills/blob/main/LICENSE
13
+ compatibility: Requires the relevant platform CLIs (kubectl, helm, terraform, git,
14
+ CI runners) and authorized access to the target environment. Docs-only; helper scripts
15
+ and templates not bundled.
16
+ metadata:
17
+ author: devops-skills
18
+ version: '1.0'
19
+ ---
20
+
21
+ # Git Workflow
22
+
23
+ Implement effective branching strategies and pull request workflows for team collaboration.
24
+
25
+ ## When to Use This Skill
26
+
27
+ Use this skill when:
28
+ - Establishing team Git workflows
29
+ - Implementing branching strategies
30
+ - Configuring pull request processes
31
+ - Setting up release management
32
+ - Improving code review practices
33
+
34
+ ## Prerequisites
35
+
36
+ - Git installed
37
+ - Repository hosting (GitHub, GitLab, Bitbucket)
38
+ - Basic Git knowledge
39
+
40
+ ## Branching Strategies
41
+
42
+ ### Trunk-Based Development
43
+
44
+ Best for: Continuous deployment, small teams, mature CI/CD
45
+
46
+ ```
47
+ main ─────●─────●─────●─────●─────●─────●─────●
48
+ │ │ │ │ │ │
49
+ └─● └─● └─● └─● └─● └─●
50
+ feature branches (short-lived)
51
+ ```
52
+
53
+ ```bash
54
+ # Create short-lived feature branch
55
+ git checkout main
56
+ git pull origin main
57
+ git checkout -b feature/add-login
58
+
59
+ # Work and commit frequently
60
+ git add .
61
+ git commit -m "feat: add login form"
62
+
63
+ # Keep branch updated
64
+ git fetch origin
65
+ git rebase origin/main
66
+
67
+ # Merge quickly (same day ideally)
68
+ git checkout main
69
+ git pull origin main
70
+ git merge feature/add-login
71
+ git push origin main
72
+ git branch -d feature/add-login
73
+ ```
74
+
75
+ ### GitHub Flow
76
+
77
+ Best for: Continuous delivery, web applications
78
+
79
+ ```
80
+ main ─────●─────●───────────●─────────────●─────●
81
+ │ ↑ ↑ ↑
82
+ └───●───●───┘ │ │
83
+ feature/login │ │
84
+ │ │
85
+ └───●───●───●───●───────┘ │
86
+ feature/dashboard │
87
+
88
+ └───●─────────────────────────┘
89
+ hotfix/security-patch
90
+ ```
91
+
92
+ ```bash
93
+ # Create feature branch from main
94
+ git checkout main
95
+ git pull origin main
96
+ git checkout -b feature/user-dashboard
97
+
98
+ # Push and create PR
99
+ git push -u origin feature/user-dashboard
100
+
101
+ # After review, merge via PR (squash recommended)
102
+ # Delete branch after merge
103
+ ```
104
+
105
+ ### GitFlow
106
+
107
+ Best for: Scheduled releases, versioned products
108
+
109
+ ```
110
+ main ────────●────────────────●──────────────●
111
+ ↑ ↑ ↑
112
+ release ────────┼────●───●──────┼──────────────┼
113
+ │ │ │ │ │
114
+ develop ───●────●────┼───●──●───●───●───●───●──┼
115
+ │ │ │ │ │ │
116
+ feature ───┴─────────┘ │ │ │ │
117
+ │ │ │ │
118
+ hotfix ────────────────────┴───────┼───┼──────┘
119
+ │ │
120
+ feature ────────────────────────────┴───┘
121
+ ```
122
+
123
+ ```bash
124
+ # Initialize GitFlow
125
+ git flow init
126
+
127
+ # Start feature
128
+ git flow feature start user-auth
129
+
130
+ # Finish feature (merges to develop)
131
+ git flow feature finish user-auth
132
+
133
+ # Start release
134
+ git flow release start 1.0.0
135
+
136
+ # Finish release (merges to main and develop)
137
+ git flow release finish 1.0.0
138
+
139
+ # Hotfix
140
+ git flow hotfix start security-fix
141
+ git flow hotfix finish security-fix
142
+ ```
143
+
144
+ ## Commit Conventions
145
+
146
+ ### Conventional Commits
147
+
148
+ ```
149
+ <type>(<scope>): <description>
150
+
151
+ [optional body]
152
+
153
+ [optional footer(s)]
154
+ ```
155
+
156
+ Types:
157
+ - `feat`: New feature
158
+ - `fix`: Bug fix
159
+ - `docs`: Documentation
160
+ - `style`: Formatting
161
+ - `refactor`: Code restructuring
162
+ - `test`: Adding tests
163
+ - `chore`: Maintenance
164
+
165
+ Examples:
166
+ ```bash
167
+ git commit -m "feat(auth): add OAuth2 login support"
168
+ git commit -m "fix(api): handle null response from payment service"
169
+ git commit -m "docs: update API documentation for v2 endpoints"
170
+ git commit -m "refactor(db): optimize user query performance"
171
+
172
+ # Breaking change
173
+ git commit -m "feat(api)!: change response format for user endpoint
174
+
175
+ BREAKING CHANGE: The user endpoint now returns an object instead of array"
176
+ ```
177
+
178
+ ### Commit Message Template
179
+
180
+ ```bash
181
+ # Create template file ~/.gitmessage
182
+ # Subject line (50 chars max)
183
+
184
+ # Body (72 chars per line max)
185
+ # - What changed
186
+ # - Why it changed
187
+ # - Any side effects
188
+
189
+ # Footer
190
+ # Fixes #123
191
+ # Co-authored-by: Name <email>
192
+
193
+ # Configure Git to use template
194
+ git config --global commit.template ~/.gitmessage
195
+ ```
196
+
197
+ ## Pull Request Workflow
198
+
199
+ ### PR Template
200
+
201
+ ```markdown
202
+ <!-- .github/pull_request_template.md -->
203
+ ## Description
204
+ Brief description of changes
205
+
206
+ ## Type of Change
207
+ - [ ] Bug fix (non-breaking change)
208
+ - [ ] New feature (non-breaking change)
209
+ - [ ] Breaking change
210
+ - [ ] Documentation update
211
+
212
+ ## Testing
213
+ - [ ] Unit tests added/updated
214
+ - [ ] Integration tests added/updated
215
+ - [ ] Manual testing performed
216
+
217
+ ## Checklist
218
+ - [ ] Code follows project style guidelines
219
+ - [ ] Self-review performed
220
+ - [ ] Documentation updated
221
+ - [ ] No new warnings introduced
222
+
223
+ ## Related Issues
224
+ Closes #
225
+
226
+ ## Screenshots (if applicable)
227
+ ```
228
+
229
+ ### Branch Protection Rules
230
+
231
+ ```yaml
232
+ # GitHub branch protection
233
+ branch_protection:
234
+ branch: main
235
+ required_pull_request_reviews:
236
+ required_approving_review_count: 1
237
+ dismiss_stale_reviews: true
238
+ require_code_owner_reviews: true
239
+ required_status_checks:
240
+ strict: true
241
+ contexts:
242
+ - "ci/tests"
243
+ - "ci/lint"
244
+ restrictions:
245
+ users: []
246
+ teams: ["maintainers"]
247
+ enforce_admins: true
248
+ required_linear_history: true
249
+ allow_force_pushes: false
250
+ allow_deletions: false
251
+ ```
252
+
253
+ ### Code Owners
254
+
255
+ ```
256
+ # .github/CODEOWNERS
257
+
258
+ # Default owners
259
+ * @team-leads
260
+
261
+ # Frontend code
262
+ /src/frontend/ @frontend-team
263
+ *.tsx @frontend-team
264
+ *.css @frontend-team
265
+
266
+ # Backend code
267
+ /src/api/ @backend-team
268
+ /src/services/ @backend-team
269
+
270
+ # Infrastructure
271
+ /terraform/ @platform-team
272
+ /k8s/ @platform-team
273
+ Dockerfile @platform-team
274
+
275
+ # Documentation
276
+ /docs/ @tech-writers
277
+ *.md @tech-writers
278
+ ```
279
+
280
+ ## Git Hooks
281
+
282
+ ### Pre-commit Hook
283
+
284
+ ```bash
285
+ #!/bin/sh
286
+ # .git/hooks/pre-commit
287
+
288
+ # Run linting
289
+ npm run lint
290
+ if [ $? -ne 0 ]; then
291
+ echo "Linting failed. Fix errors before committing."
292
+ exit 1
293
+ fi
294
+
295
+ # Run tests
296
+ npm run test:unit
297
+ if [ $? -ne 0 ]; then
298
+ echo "Tests failed. Fix tests before committing."
299
+ exit 1
300
+ fi
301
+
302
+ # Check for debug statements
303
+ if grep -r "console.log\|debugger\|binding.pry" --include="*.js" --include="*.ts" --include="*.rb" src/; then
304
+ echo "Remove debug statements before committing."
305
+ exit 1
306
+ fi
307
+ ```
308
+
309
+ ### Using Husky
310
+
311
+ ```json
312
+ // package.json
313
+ {
314
+ "husky": {
315
+ "hooks": {
316
+ "pre-commit": "lint-staged",
317
+ "commit-msg": "commitlint -E HUSKY_GIT_PARAMS"
318
+ }
319
+ },
320
+ "lint-staged": {
321
+ "*.{js,ts,tsx}": ["eslint --fix", "prettier --write"],
322
+ "*.{css,scss}": ["prettier --write"]
323
+ }
324
+ }
325
+ ```
326
+
327
+ ### Commitlint Configuration
328
+
329
+ ```javascript
330
+ // commitlint.config.js
331
+ module.exports = {
332
+ extends: ['@commitlint/config-conventional'],
333
+ rules: {
334
+ 'type-enum': [
335
+ 2,
336
+ 'always',
337
+ ['feat', 'fix', 'docs', 'style', 'refactor', 'test', 'chore', 'revert']
338
+ ],
339
+ 'subject-max-length': [2, 'always', 72],
340
+ 'body-max-line-length': [2, 'always', 100]
341
+ }
342
+ };
343
+ ```
344
+
345
+ ## Release Workflow
346
+
347
+ ### Automated Release with Tags
348
+
349
+ ```bash
350
+ # Create annotated tag
351
+ git tag -a v1.0.0 -m "Release version 1.0.0"
352
+
353
+ # Push tag
354
+ git push origin v1.0.0
355
+
356
+ # Create release from tag (GitHub CLI)
357
+ gh release create v1.0.0 \
358
+ --title "Release 1.0.0" \
359
+ --notes "Release notes here" \
360
+ --target main
361
+ ```
362
+
363
+ ### Changelog Generation
364
+
365
+ ```bash
366
+ # Using conventional-changelog
367
+ npx conventional-changelog -p angular -i CHANGELOG.md -s
368
+
369
+ # Using git-cliff
370
+ git cliff -o CHANGELOG.md
371
+ ```
372
+
373
+ ## Common Git Operations
374
+
375
+ ### Rebase vs Merge
376
+
377
+ ```bash
378
+ # Rebase (clean history)
379
+ git checkout feature/my-feature
380
+ git rebase main
381
+ git push --force-with-lease
382
+
383
+ # Merge (preserve history)
384
+ git checkout main
385
+ git merge feature/my-feature
386
+
387
+ # Squash merge (single commit)
388
+ git merge --squash feature/my-feature
389
+ git commit -m "feat: add feature X"
390
+ ```
391
+
392
+ ### Cherry Pick
393
+
394
+ ```bash
395
+ # Apply specific commit to current branch
396
+ git cherry-pick abc123
397
+
398
+ # Cherry pick range
399
+ git cherry-pick abc123..def456
400
+
401
+ # Cherry pick without committing
402
+ git cherry-pick -n abc123
403
+ ```
404
+
405
+ ### Interactive Rebase
406
+
407
+ ```bash
408
+ # Clean up last 3 commits
409
+ git rebase -i HEAD~3
410
+
411
+ # In editor:
412
+ # pick abc123 First commit
413
+ # squash def456 Second commit
414
+ # reword ghi789 Third commit
415
+ ```
416
+
417
+ ## Common Issues
418
+
419
+ ### Issue: Merge Conflicts
420
+ **Problem**: Conflicts when merging branches
421
+ **Solution**: Rebase frequently, communicate with team, use smaller PRs
422
+
423
+ ### Issue: Diverged Branches
424
+ **Problem**: Local branch far behind remote
425
+ **Solution**: `git pull --rebase` or `git fetch && git rebase origin/main`
426
+
427
+ ### Issue: Accidental Commit to Wrong Branch
428
+ **Problem**: Committed to main instead of feature
429
+ **Solution**: `git reset HEAD~1`, checkout correct branch, recommit
430
+
431
+ ## Best Practices
432
+
433
+ - Keep branches short-lived (< 1 week)
434
+ - Write meaningful commit messages
435
+ - Use PR templates consistently
436
+ - Require code reviews
437
+ - Protect main/master branch
438
+ - Automate checks with CI
439
+ - Squash merge for clean history
440
+ - Delete branches after merge
441
+
442
+ ## Related Skills
443
+
444
+ - semantic-versioning (`semantic-versioning`) - Version management
445
+ - github-actions (`github-actions`) - CI/CD automation
446
+ - feature-flags (`feature-flags`) - Feature management
447
+
448
+ ## Limitations
449
+
450
+ - Guidance executes against real environments: confirm target, blast radius, and rollback plan before applying anything.
451
+ - Never deploy to production without explicit approval. Docs-only import: upstream scripts and templates not bundled.
452
+
453
+ ### Example
454
+
455
+ ```bash
456
+ git status && git diff --stat
457
+ kubectl diff -f manifest.yaml
458
+ ```
459
+
460
+ > Adapted from [BagelHole/DevOps-Security-Agent-Skills](https://github.com/BagelHole/DevOps-Security-Agent-Skills) (MIT); frontmatter, When to Use/Limitations, and safety boundaries added for upstream compliance. Docs-only import: helper scripts and templates not bundled.