plugins/build/skills/modular-release-pipelines/SKILL.md
Automate version management and changelog generation with smart builds. Only build changed components using GitHub App tokens and release-please integration.
npx skillsauth add adaptive-enforcement-lab/claude-skills modular-release-pipelinesInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
This guide covers implementing release automation with:
flowchart LR
subgraph release[Release Pipeline]
Main[Push to Main] --> AppToken[GitHub App Token]
AppToken --> RP[Release-Please]
RP --> PR[Creates PR]
end
subgraph build[Build Pipeline]
PR -->|pull_request event| DC[Detect Changes]
DC --> Test[Test]
Test --> Build[Build]
Build --> Status[Build Status]
end
%% Ghostty Hardcore Theme
style Main fill:#65d9ef,color:#1b1d1e
style AppToken fill:#9e6ffe,color:#1b1d1e
style RP fill:#9e6ffe,color:#1b1d1e
style PR fill:#fd971e,color:#1b1d1e
style DC fill:#fd971e,color:#1b1d1e
style Test fill:#9e6ffe,color:#1b1d1e
style Build fill:#a7e22e,color:#1b1d1e
style Status fill:#5e7175,color:#f8f8f3
Before implementing release pipelines, set up a GitHub App for your organization:
See examples.md for code examples.
documentation
Workload Identity Federation implementation guide. GKE setup, IAM bindings, ServiceAccount configuration, migration from service account keys, and troubleshooting patterns.
development
Secure GitHub Actions trigger patterns for pull requests, forks, and reusable workflows. Preventing privilege escalation and code injection through trigger misconfiguration.
development
Structured framework for evaluating GitHub Actions security before adoption. Trust tiers, risk assessment checklist, and decision tree for action evaluation.
testing
Securely store GitHub App credentials across different environments. GitHub Actions secrets, external CI, Kubernetes, and automated rotation patterns.