360 Secure SkillHub
360 安全技能中心

Ci Cd Compliance

提供 CI/CD 合规规则:门禁顺序(安装→lint/格式→类型检查→单测→集成→可选端到端→打包)、仅绿灯合并、合并后自动部署预发、生产需标签或审批,以及 CI 失败时说明根因并在同一 PR 内修复。正文引用的详细配置与调试指南文件在文件列表中缺失。

urbantech
urbantech
热度 61.91
最近更新 2026-05-11 17:35:43
分类:开发依赖:纯提示词应用场景:DevOps / 调试排错 / 工作流

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add ci-cd-compliance
Metadata
name
ci-cd-compliance
description
CI/CD pipeline requirements and deployment standards. Use when (1) Setting up CI/CD pipelines, (2) Debugging CI failures, (3) Configuring deployment workflows, (4) Managing staging/production releases, (5) Investigating build failures. Covers CI gate requirements, merge policies, auto-deploy to staging, production approval process.

CI/CD Compliance Rules

CI Gates Sequence

install → lint/format → typecheck → unit → integration → (optional e2e) → package

Merge Policy

  • Merge only if green
  • Auto-deploy to staging on merge
  • Production requires tag/approval

CI Failure Handling

When CI fails:

  1. Explain root cause in PR comment
  2. Include the fix in the same PR when feasible
  3. Don't merge until all gates pass

IDE Integration

  • AINative / Windsurf / Cursor / Claude Code: Use built-in code actions and terminal to run tests/linters
  • Prefer unified diffs in responses so changes are patchable across IDEs
  • Attach artifacts (test output, screenshots, logs) whenever you assert a claim

Reference Files

See references/pipeline-requirements.md for detailed CI configuration, gate definitions, and failure debugging guide.