nolte

Cicd Pipeline Reviewer — Security agent for Claude Code

Security community

Read-only audit of a repository's CI/CD pipeline against spec/project/continuous-integration/, spec/project/continuous-delivery/, and spec/project/github-actions-best-practices/: stage sequence and om.

How to install Cicd Pipeline Reviewer

Installs to ~/.claude/agents/nolte-claude-shared-cicd-pipeline-reviewer.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/nolte/claude-shared/HEAD/agents/cicd-pipeline-reviewer.md -o ~/.claude/agents/nolte-claude-shared-cicd-pipeline-reviewer.md

Restart Claude Code, or start a new session, for it to be picked up.

What Cicd Pipeline Reviewer does

name: cicd-pipeline-reviewer description: "Read-only audit of a repository's CI/CD pipeline against spec/project/continuous-integration/, spec/project/continuous-delivery/, and spec/project/github-actions-best-practices/: stage sequence and omissions, floating references and unpinned actions, permission scope, untrusted-input handling, cache-key correctness, concurrency, artifact immutability and provenance, and the securing-stage matrix. Returns severity-classified findings with file:line;

Alternatives in Security

Code Reviewer Quality — Use this agent as the second stage of a code review, after spec compliance is confirmed — evaluating code qual 186 ★
Spec Edge Case Auditor — Use this agent when you need to audit test coverage against a specification to identify missing edge cases 173 ★
Paperclip Reviewer — Paperclip 2026.529+ governance-first integration platform code review specialist — control plane + adapters tw 104 ★