plugins/patterns/skills/strangler-fig/SKILL.md
Incremental migration from legacy systems. Run old and new in parallel, gradually shift traffic, rollback at any point. Zero downtime, production-validated.
npx skillsauth add adaptive-enforcement-lab/claude-skills strangler-figInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Use when:
Don't use when:
The strangler fig pattern has two distinct implementation approaches depending on what you're replacing:
Gradually shift user traffic from old to new system using percentage-based routing.
Use for:
How it works: Router/proxy directs percentage of traffic to new system. Start at 1%, increase gradually to 100%.
Replace entire components without routing traffic, including databases, service meshes, operators, and storage.
Use for:
How it works: Build new component, ensure compatibility, swap references, remove old component. No routing layer needed.
Key distinction: Traffic routing = gradual user migration. Component replacement = infrastructure swap with compatibility layer.
See examples.md for code examples.
documentation
Workload Identity Federation implementation guide. GKE setup, IAM bindings, ServiceAccount configuration, migration from service account keys, and troubleshooting patterns.
development
Secure GitHub Actions trigger patterns for pull requests, forks, and reusable workflows. Preventing privilege escalation and code injection through trigger misconfiguration.
development
Structured framework for evaluating GitHub Actions security before adoption. Trust tiers, risk assessment checklist, and decision tree for action evaluation.
testing
Securely store GitHub App credentials across different environments. GitHub Actions secrets, external CI, Kubernetes, and automated rotation patterns.