CI CD 审查
- 作者仓库星标 0
- 作者仓库 skills-registry
Purpose
CI/CD review for workflows, artifact safety, caching, deployment gates, secrets, permissions, and reproducibility.
Review focus
- overbroad token permission
- unsafe shell
- missing gate
- cache poisoning
- non-reproducible build
- artifact leak
Method
- Inspect changed files and diff hunks relevant to this skill.
- Use repository-native tools when available.
- Prefer exact evidence from changed code.
- Emit findings using the shared JSONL finding contract.
- Avoid style-only comments unless they create maintainability or correctness risk.
Tooling hints
- Use
grepor editor search before opening files. - Use
git,grep, andghCLI. These are universally available and sufficient for all review tasks. - Do not depend on tools beyond
git,grep,cat,head,wc, andgh.
<!-- tomevault:4.0:skill_md:2026-05-22 -->Source: aydabd/github-bootstrap — distributed by TomeVault.
- 流狐分类
- 运维部署
- 作者声明 Agent
- 未找到明确声明；不据此推断已兼容或已测试
- 静态检查
- 88 / 100 · 启发式扫描，不代表运行安全
- 作者 / 版本 / 许可
- @tomevault-io · 未声明 license
- 流狐 Token 估算
- 低消耗
- 流狐接入估算
- 需简单配置
- 是否需要外部 API Key
- 未发现要求
- 检测到的系统要求
- 未声明
- 底层运行要求
- 未声明
- 检测到的文件与系统行为
-
- 只读
- 允许写入 / 修改
- Shell 执行
- 检测到的网络行为
- 仅限本地
- 安装命令数
- 无（仅作为资料）
档案由构建时根据 SKILL.md 与安装命令自动衍生，可能与作者实际意图存在差异。
需要注意： 未限定 allowed-tools，默认拥有全部工具权限。
作者没有在当前 SKILL.md 中定义固定输出样例。CI/CD review for workflows, artifact safety, caching, deployment gates, secrets, permissions, and reproducibility.
overbroad token permission unsafe shell missing gate
Inspect changed files and diff hunks relevant to this skill. Use repository-native tools when available. Prefer exact evidence from changed code.
Use grep or editor search before opening files. Use git, grep, and gh CLI. These are universally available and sufficient for all review tasks. Do not depend on tools beyond git, grep, cat, head, wc, and gh.
## Purpose
CI/CD review for workflows, artifact safety, caching, deployment gates, secrets, permissions, and reproducibility.
## Review focus
- overbroad token permission
- unsafe shell
- missing gate
- cache poisoning
- non-reproducible build
- artifact leak
## Method
1. Inspect changed files and diff hunks relevant to this skill.
2. Use repository-native tools when available.
3. Prefer exact evidence from changed code.
4. Emit findings using the shared JSONL finding contract.
5. Avoid style-only comments unless they create maintainability or correctness risk.
## Tooling hints
- Use `grep` or editor search before opening files.
- Use `git`, `grep`, and `gh` CLI. These are universally available and sufficient for all review tasks.
- Do not depend on tools beyond `git`, `grep`, `cat`, `head`, `wc`, and `gh`.
---
> Source: [aydabd/github-bootstrap](https://github.com/aydabd/github-bootstrap) — distributed by [TomeVault](https://tomevault.io).
<!-- tomevault:4.0:skill_md:2026-05-22 -->作者原文负责流程事实；流狐只索引当前章节、要点、文件与命令。
章节 -> Purpose → Review focus → Method → Tooling hints
要点 -> CI/CD review for workflows, artifact safety, caching, deployment gates, secrets, permissions, and reproducibility. · 1. Inspect changed files and diff hunks relevant to this skill. · - Use grep or editor search before opening files. · --- > Source: [aydabd/github-bootstrap](https://github.com/aydabd/github-bootstrap) — distributed by [TomeVault](https://tomevault.io).
文件/命令 -> grep · git · cat · head
内容 SHA-256 -> bb8952f3c8e8
方法与流程
适用与边界
原文中的明确线索
grep、git、cat、head