360 Secure SkillHub
360 安全技能中心

Prisma Migrate Guard

核心功能:校验Prisma工具与DB URL有效性,检查迁移失败、漂移、未应用文件等危险状态;支持通过环境变量配置是否允许部分非致命状态仅警告。典型场景:部署前或CI发布步骤,作为部署门控。输入为可选环境变量,输出简洁PASS/FAIL报告,健康时退出码0,异常时非零退出拦截部署,且仅做只读检查不执行迁移。

daniellummis
daniellummis
热度 52.86
最近更新 2026-05-11 17:28:58
分类:开发依赖:代码执行应用场景:DevOps

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add prisma-migrate-guard
Metadata
name
prisma-migrate-guard
description
Preflight Prisma migration state before deploy; fails fast on drift, failed migrations, missing DB URLs, or unapplied migration files.
version
1.0.0
metadata
{"openclaw":{"requires":{"bins":["bash","node","npx"]}}}

Prisma Migrate Guard

Use this skill before deploys or CI release steps to verify Prisma migrations are healthy and ready to apply.

What this skill does

  • Verifies required Prisma CLI/runtime tools are available
  • Validates migration DB URL inputs (DATABASE_URL by default)
  • Runs prisma migrate status against a target schema
  • Fails on common dangerous states:
    • failed migrations
    • migration drift warnings
    • unapplied migration files
    • missing migration history table hints
  • Exits non-zero for CI/deploy gating

Inputs

  • Optional env vars:
    • PRISMA_SCHEMA_PATH (default: prisma/schema.prisma)
    • PRISMA_MIGRATE_DB_URL_ENV (default: DATABASE_URL)
    • PRISMA_MIGRATE_GUARD_ALLOW_UNAPPLIED (1 to warn instead of fail)
    • PRISMA_MIGRATE_GUARD_ALLOW_DRIFT (1 to warn instead of fail)

Run

bash scripts/check-prisma-migrate.sh

With explicit schema and env key:

PRISMA_SCHEMA_PATH=apps/api/prisma/schema.prisma \
PRISMA_MIGRATE_DB_URL_ENV=POSTGRES_PRISMA_URL \
bash scripts/check-prisma-migrate.sh

Output contract

  • Prints a concise PASS/FAIL report
  • Exit code 0 on healthy status
  • Exit code 1 on blocking migration issues

Notes

  • This guard is read-only (migrate status), it does not apply migrations.
  • Keep it in CI before deploy or startup migration steps.