OhMySkills
AI 智能体 skill-marketplace-ci-cd 更新于 2026-11-07

Skill Marketplace · 持续交付规则

CI/CD rules for Skill Marketplace: fail-fast stages, digest pinning and one promoted artifact.

技术栈
Skill Marketplace
主题
持续交付
条目
9 条
版本
v0.2.0

✓ 应当这么做

  • ✓ Fail fast: format, lint, typecheck, test, build — in that order
  • ✓ Pin actions and base images by digest for anything touching credentials
  • ✓ Keep one artifact promoted through environments instead of rebuilds

✕ 常见反模式

  • ✕ Secrets echoed into logs
  • ✕ Pipelines only running on the default branch
  • ✕ Deploy steps with no rollback button

◎ 交付前验证

  • ◎ Injection cases added to the adversarial test corpus
  • ◎ Tool allow-lists reviewed; new tools default to deny
  • ◎ Secrets scanned in output before responding

同分类条目

42 篇

同一技术栈的其他条目