CI/CD quality gates

SkillSecurity

Design lightweight CI quality gates—lint, test tiers, security scans, and merge policies. Use when setting up or improving pipelines without tying to one stack only.

Available today. Use it from your connected AI after setup.

Connect ahel once, and every AI you use reads what you have installed.

Then ask your AI: use the CI/CD quality gates skill

What this skill tells your AI

The instructions your AI receives, as published by charlieviettq/awesome-agent-skill in .claude/skills/ci-cd-quality-gates/SKILL.md and read by ahel’s review.

Principles

  • Fast feedback on every PR; expensive jobs scheduled or nightly
  • Fail closed on security and contract breaks
  • Same commands locally and in CI

Tiered gates

TierWhenExamples
PR requiredEvery pushLint, unit tests, typecheck
PR optionalLarge reposIntegration, e2e subset
Main/nightlyPost-mergeFull e2e, perf budget, dependency audit

Gate design

  1. Lint/format — consistent style, catch syntax issues
  2. Unit tests — required; flaky tests fixed or quarantined
  3. Build — artifact or package builds for deployable repos
  4. Security — secret scan, dependency audit (fail on critical)
  5. Contract — OpenAPI/schema diff when APIs change

Merge policy

  • Required checks green before merge
  • No force-push to protected default branch without policy
  • Document bypass process for emergencies

Anti-patterns

  • 30+ minute PR feedback loops
  • Different test command in CI vs README
  • Ignored flaky tests accumulating

Related

verify-before-done, gstack/ship, test-failure-triage, api-security-testing

Signals

GitHub stars
26
Forks
9
Last commit
Jul 2026
Advanced
Catalog kind
skill
Gateway key
ci-cd-quality-gates
Source
github.com/charlieviettq/awesome-agent-skill