ariffazil/GitHub CI Obedience
skills/github/06-ci-obedience/SKILL.md
CI is doctrine enforcement. Never bypass.
$ install --global
skillsauthnpx skillsauth add ariffazil/openclaw-workspace GitHub CI ObedienceInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jul 11, 2026, 3:51 AM130.1s1 file scanned
SKILL.md
- id:
- ci-obedience
- name:
- GitHub CI Obedience
- version:
- 1.0.0
- description:
- CI is doctrine enforcement. Never bypass.
- owner:
- AAA
- risk_tier:
- low
- glyph:
- 🜆
- position:
- 6 of 12 in the GitHub Canon
- language:
- true
- math:
- false
- physics:
- false
- skills:
- []
- schema_version:
- 1
- artifact_hash:
- 8d77773612b226bf
- autonomy_tier:
- T1
🜆 6. GitHub CI Obedience
"CI is doctrine enforcement. Never bypass." — AAA GitHub Canon, position 6 of 12
Purpose
Write code that passes tests, lint, safety, and policy checks. Read CI failures. Fix violations.
When to Use
- On every PR update — CI runs automatically
- When CI fails — diagnose (github-ci-diagnose) and fix
- When adding new tests or new CI gates
When NOT to Use
- Do NOT use to re-run CI without approval (masks flakes, wastes compute)
- Do NOT use to edit .github/workflows/*.yml directly without 888_JUDGE
- Do NOT use to dismiss a security scan failure as false positive without evidence
Procedure
- On push: GitHub Actions runs the workflow YAML
- Local mirror:
make test(pytest) +ruff check .+make security-audit - On red: classify failure (code-regression | dependency-drift | infra-flake | lint-format | secret-gate | config-error | cross-repo-break)
- Fix at the smallest possible blast radius — reversible, bounded, tested
- Push fix as new commit on the PR branch — never force-push during review
Allowed Tools
| Tool | Purpose |
|---|---|
| forge_log_tail | ci-obedience operation |
| forge_shell_dryrun | ci-obedience operation |
| forge_github_get_file | ci-obedience operation |
Forbidden Actions
- NEVER commit directly to main to 'fix CI quickly'
- NEVER propose --force upgrades or destructive dependency resolution
- NEVER disable a security scan to make CI green
- NEVER edit .github/workflows/*.yml without 888_JUDGE
Output
CI status (green/red) + failure class + root cause + minimal fix + local verification command
Sibling Skills
github-ci-diagnosesecret-safety-scanparallel-authority-detection
Position 6 of 12 in the AAA GitHub Canon. Sovereign ruling 2026-06-24. Consolidates and supersedes prior GitHub-related skills in the federation. License: AGPL-3.0 · Sovereign: Arif bin Fazil DITEMPA BUKAN DIBERI
Related Skills
ariffazil/XAUUSD-trading-stack
development
VerifiedTrustedCommunity
Federation-wide gold (XAUUSD) trading capability. Python stack, OANDA broker, backtesting, macro signals, RSI strategy. Every organ has a role.
2SKILL.mdUpdated Jul 24, 2026
ariffazil/wealth-claim-state
development
VerifiedTrustedCommunity
Capital claim state management — tracks claim lifecycle across WEALTH organ.
2SKILL.mdUpdated Jul 24, 2026
ariffazil/warga-constitutional
development
VerifiedTrustedCommunity
Archived constitutional warga placeholder retained only for audit provenance. Do not use for active work; use the live arifOS governance and constitutional skills instead.
2SKILL.mdUpdated Jul 24, 2026
ariffazil/warga
testing
VerifiedTrustedCommunity
Warga (citizen) agent skills for AAA federation members. See subdirectories for specialized warga skills.
2SKILL.mdUpdated Jul 24, 2026