sourjya

Review Cicd Pipeline

Name: Review Cicd Pipeline
Author: sourjya

Security community

SOURCE https://github.com/sourjya/kiro-rails/blob/main/.claude/commands/review-cicd-pipeline.md

Description

--- description: "Audit CI/CD pipelines for missing quality gates, unpinned actions, secret exposure in logs, and deploy steps that can run without passing tests." --- Before scanning, read `docs/decisions/` ADRs if they exist. Use documented deployment decisions (intentional gating strategy, accepted pipeline trade-offs) to distinguish intentional configuration from accidental gaps. Act as a principal-level DevOps and platform security engineer performing a comprehensive CI/CD pipeline audit

Installation

Installs to ~/.claude/commands/sourjya-kiro-rails-review-cicd-pipeline.md

Terminal

mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/sourjya/kiro-rails/HEAD/.claude/commands/review-cicd-pipeline.md -o ~/.claude/commands/sourjya-kiro-rails-review-cicd-pipeline.md

Restart Claude Code, or start a new session, for it to be picked up.