用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt;运行前请先检查来源。
npx skills add https://github.com/akin-ozer/cc-devops-skills --skill gitlab-ci-validator命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地?可下载 SkillsMP 当前能够提供的文件。
正在显示 SKILL.md
| name | gitlab-ci-validator |
| description | Validate, lint, audit, or fix .gitlab-ci.yml pipelines, stages, and jobs. |
Comprehensive toolkit for validating, linting, testing, and securing .gitlab-ci.yml configurations.
Use this skill when requests include intent like:
.gitlab-ci.yml"All commands below assume repository root as current working directory.
# Ensure validator scripts are executable
chmod +x devops-skills-plugin/skills/gitlab-ci-validator/scripts/*.sh \
devops-skills-plugin/skills/gitlab-ci-validator/scripts/*.py
# Required runtime
python3 --version
Use one canonical command path for orchestration:
VALIDATOR="bash devops-skills-plugin/skills/gitlab-ci-validator/scripts/validate_gitlab_ci.sh"
Optional local execution tooling (for --test-only):
bash devops-skills-plugin/skills/gitlab-ci-validator/scripts/install_tools.sh
# 1) Full validation (syntax + best practices + security)
$VALIDATOR .gitlab-ci.yml
# 2) Syntax and schema only (required first gate)
$VALIDATOR .gitlab-ci.yml --syntax-only
.gitlab-ci.yml --best-practices
.gitlab-ci.yml --security-only
.gitlab-ci.yml --test-only
.gitlab-ci.yml --strict
Follow these gates in order:
2 (--syntax-only).3 (--best-practices) and apply relevant improvements.4 (--security-only) and fix all critical/high findings before merge.5 (--test-only) for local execution checks.6 (--strict) for final merge gate.Required gates: syntax + security. Recommended gate: best practices. Optional gate: local execution test.
critical: Direct credential/secret exposure or high-confidence compromise path. Block merge.high: Exploitable unsafe behavior or strong security regression. Fix before merge.medium: Security hardening gap with realistic risk. Track and fix soon.low/suggestion: Optimization or maintainability improvement.yaml-syntax, job-stage-undefined, dependencies-undefined-job): prevent pipeline parse and dependency failures.cache-missing, artifact-no-expiration, dag-optimization): reduce runtime cost and improve pipeline throughput.hardcoded-password, curl-pipe-bash, include-remote-unverified): reduce credential leaks and supply-chain risk.devops-skills-plugin/skills/gitlab-ci-validator/docs/gitlab-ci-reference.mddevops-skills-plugin/skills/gitlab-ci-validator/docs/best-practices.mddevops-skills-plugin/skills/gitlab-ci-validator/docs/common-issues.mdpython3:
PyYAML:
python_wrapper.sh auto-creates .venv and installs pyyaml when possible.pyyaml from an internal mirror, then rerun.gitlab-ci-local, node, or docker:
--test-only reports warning/failure.chmod command from the Setup section.$VALIDATOR examples/basic-pipeline.gitlab-ci.yml --syntax-only
$VALIDATOR examples/basic-pipeline.gitlab-ci.yml --security-only
$VALIDATOR .gitlab-ci.yml --strict
stages:
- validate
validate_gitlab_ci:
stage: validate
script:
- chmod +x devops-skills-plugin/skills/gitlab-ci-validator/scripts/*.sh devops-skills-plugin/skills/gitlab-ci-validator/scripts/*.py
- bash devops-skills-plugin/skills/gitlab-ci-validator/scripts/validate_gitlab_ci.sh .gitlab-ci.yml --strict
# Syntax validator (via wrapper for PyYAML fallback)
bash devops-skills-plugin/skills/gitlab-ci-validator/scripts/python_wrapper.sh \
devops-skills-plugin/skills/gitlab-ci-validator/scripts/validate_syntax.py .gitlab-ci.yml
# Best-practices validator
bash devops-skills-plugin/skills/gitlab-ci-validator/scripts/python_wrapper.sh \
devops-skills-plugin/skills/gitlab-ci-validator/scripts/check_best_practices.py .gitlab-ci.yml
# Security validator
bash devops-skills-plugin/skills/gitlab-ci-validator/scripts/python_wrapper.sh \
devops-skills-plugin/skills/gitlab-ci-validator/scripts/check_security.py .gitlab-ci.yml
name and description unchanged.chmod prerequisites appear before workflow/use examples.gitlab-ci-local or GitLab CI Lint for runtime behavior confirmation.Generate, create, or scaffold Ansible playbooks, roles, tasks, handlers, inventory, vars.
Validate, lint, audit, or debug Ansible playbooks, roles, inventories, FQCN, tasks.
Generate/create/scaffold azure-pipelines.yml, stages, jobs, steps, or reusable templates.
基于 SOC 职业分类