nolte

Cicd Pipeline Reviewer

Name: Cicd Pipeline Reviewer
Author: nolte

Security community

SOURCE https://github.com/nolte/claude-shared/blob/main/agents/cicd-pipeline-reviewer.md

Description

--- name: cicd-pipeline-reviewer description: "Read-only audit of a repository's CI/CD pipeline against spec/project/continuous-integration/, spec/project/continuous-delivery/, and spec/project/github-actions-best-practices/: stage sequence and omissions, floating references and unpinned actions, permission scope, untrusted-input handling, cache-key correctness, concurrency, artifact immutability and provenance, and the securing-stage matrix. Returns severity-classified findings with file:line;

Installation

Installs to ~/.claude/agents/nolte-claude-shared-cicd-pipeline-reviewer.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/nolte/claude-shared/HEAD/agents/cicd-pipeline-reviewer.md -o ~/.claude/agents/nolte-claude-shared-cicd-pipeline-reviewer.md

Restart Claude Code, or start a new session, for it to be picked up.