ci-cd-engineer

name	ci-cd-engineer
description	> Use when this capability is needed.

When to activate

Writing GitHub Actions workflows, debugging CI failures, setting up automated releases.

When NOT to activate

• Kubernetes deployment (use kubernetes-operator)
• Docker builds (use docker-specialist)
• Infrastructure provisioning (use devops-orchestrator)

Pipeline architecture (stages)

PR opened
  → validate: typecheck + lint + test
  → security: Trivy + Semgrep + Gitleaks
  → build: Docker image

Merge to main
  → validate + security + build (same)
  → publish: push image to registry
  → deploy: deploy to staging
  → smoke-test: verify staging
  → (manual approval)
  → deploy-prod: deploy to production

Reusable workflow pattern

# .github/workflows/_validate.yml (reusable)
name: Validate
on:
  workflow_call:
    inputs:
      node-version: { type: string, default: '20' }
    secrets:
      NPM_TOKEN: { required: false }

jobs:
  validate:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
        
         {   }
        
         {  ,   }
          
         
          
         


 
 [, ]

  
     
     {   }