Local Docker Compose stacks, GitHub Actions hardening, container image baselines and signed, verifiable releases.
0 on GitHubby Rene Roscherv0.1.0Apache-2.0updated 5 days agoci-cd
/
Plugin delivery from marketplace rene-roscher-skills in Rene-Roscher/skills. Commands read from the repo's manifest — 5 days ago.
What it installs
Skills (4)
container-images
Builds small, reproducible, safe container images: multi-stage, distroless bases pinned by digest, non-root, no secrets in layers, smoke test, scan, sign. Use when writing or reviewing a Dockerfile, .dockerignore, compose or bake file, or asked to containerize, shrink an image, go distroless or pass
github-actions-hardening
Hardens GitHub Actions against supply-chain and privilege abuse: SHA-pinned actions, least-privilege GITHUB_TOKEN, OIDC over stored keys, injection-safe expressions, pull_request_target, self-hosted runners, zizmor. Use when editing .github/workflows, action.yml or dependabot.yml, adding a release o
local-dev-stack
Sets up and reviews a Docker Compose dev stack that runs beside other projects on one Linux workstation: own host port block on 127.0.0.1, fixed project name, one Makefile with doctor, health-gated startup, one service per process, test-mode providers, tests on the production engine. Use when writin
release-supply-chain
Release rules for binaries, packages and images: immutable semver tags, build once and promote by digest, cosign keyless in CI versus an offline key for self-updaters, SBOM and provenance, verify before run, signed checksums, no @latest or install-by-pipe, self-update with rollback, ring rollouts. U
Goal focus, work on smaller models, a glossary of EU and German ecosystem terms, subagent delegation, hand-off specs for executor models, evidence before claims, verification, safe actions, project inception, scaffolding from official starters, planning, delivery, tests, maintainable code, lessons, tooling, commits, stack bootstrap, performance, security assurance. Stack-agnostic.
Multi-tenant B2B SaaS: tenancy model, domain design and events, localization, external IDs, isolation, RBAC, plan entitlements, build vs buy, EU B2B billing, GDPR, EU and German legal baseline, service boundaries, async jobs, egress and webhooks.
Infrastructure as code, Kubernetes workloads, edge proxy and TLS, observability and DR, and failover for DNS, mail, hosting, PostgreSQL and object storage.
Search and AI discoverability that holds up, live measurement through Search Console, Bing and Plausible with a measure, change and re-measure loop, and a B2B go-to-market from launch to sales motion.
Editorial diagrams in your brand, as self-contained HTML and SVG. Architecture, flowcharts, sequence, state machines, ER and database schemas, timelines, swimlanes, org charts, Gantt, Wardley maps, user journeys, service blueprints, UML class, lifecycle phase maps, and charts from bar, line and scatter to Sankey, treemap and heatmap, plus many more. Redraws draw.io, Mermaid, Excalidraw and PlantUML files. Exports SVG and PNG.
Agent skills for Azure SQL Developer, the Azure SQL Database engine running locally in a container. Teaches your agent to run the engine, connect, migrate, scaffold, build RAG, wire CI, and go local-to-cloud, using the real Private Preview image instead of the SQL Server image.
45 advanced engineering skills: agent designer, agent workflow designer, RAG architect, database designer + schema designer + SQL assistant, migration architect, observability designer, dependency auditor, changelog generator, API design reviewer, API test suite builder, CI/CD pipeline builder, MCP server builder, skill security auditor, skill tester, performance profiler, focused-fix, browser-automation, full-page-screenshot, git-worktree-manager, monorepo-navigator, codebase-onboarding, interview-system-designer, runbook-generator, spec-driven-workflow, secrets-vault-manager, env-secrets-manager, pr-review-expert, self-eval, tc-tracker, feature-flags-architect, kubernetes-operator, chaos-engineering, ship-gate, slo-architect (error-budget + multi-window burn-rate alerts per Google SRE Workbook), tech-debt-tracker, agent-regression-evals, coding-agent-rollout, commit-craft, agent-run-forensics and i18n-localization. Agent skill and plugin for Claude Code, Codex, Gemini CLI, Cursor, OpenClaw.
48 skills · hooks
alirezarezvani/claude-skills 29,725
Maintain delivery?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.