jcsaaddupuy/gitlab-ci
skills/gitlab-ci/SKILL.md
GitLab CI/CD configuration guide
testing
Updated May 6, 2026
$ install --global
skillsauthnpx skillsauth add jcsaaddupuy/badrobots gitlab-ciInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 6, 2026, 8:08 AM155.1s2 files scanned
SKILL.md
- name:
- gitlab-ci
- description:
- GitLab CI/CD configuration guide
GitLab CI - Agent Usage Guide
Core Concept
GitLab CI/CD configuration for Python, Docker, and LangGraph projects using shared templates from the-foundry/tools.
Critical Reference Files
IMPORTANT: Before creating or modifying .gitlab-ci.yml, read:
- Core Rules - Template usage, project-specific configuration
Decision Tree
When creating NEW .gitlab-ci.yml:
- Read references/core-rules.md
- Identify project type (Python, Docker, LangGraph, AWS)
- Include appropriate shared templates
- Configure project-specific variables
- Enable required jobs (gitleaks, linting, tests)
Project Type Template Selection:
- Python only → Include python-gitlab-ci.yml
- Python + AWS → Include python-gitlab-ci.yml + python-aws-gitlab-ci.yml
- Docker → Include docker-gitlab-ci.yml
- LangGraph → Include langgraph-gitlab-ci.yml
- Combined → Include all relevant templates
Core Principles
- Use shared templates - Leverage the-foundry/tools templates
- Enable security - Always include gitleaks
- Enable quality - Always enable linting and tests
- Adapt to project - Remove unnecessary jobs, add needed ones
- Follow conventions - Use standard stages and job naming
Common Pipeline Structure
Stages:
security → lint → test → build → push → deploy → release
Required Jobs
gitleaks- Security scanning- Linting jobs (from templates)
- Test jobs (from templates)
Optional Jobs
- Docker build/push (if using containers)
- AWS deployment (if using AWS)
- LangGraph specific jobs (if using LangGraph)
Integration Points
With Python Projects
- See ../python/SKILL.md for project structure
- Ensure tests follow ../python/references/testing.md
- Variable:
PYTHON_PROJECTshould match project name
With Docker Projects
- See ../docker/SKILL.md for Dockerfile requirements
- Variables needed:
DOCKER_BUILD_PATHDOCKERFILE_NAMEIMAGE_NAME
With LangGraph Projects
- See ../langgraph/SKILL.md for requirements
- Includes LangGraph-specific validation jobs
Quick Reference
Minimal Python Project
include:
- project: the-foundry/tools/templates
file: gitlab/default.yml
- project: the-foundry/tools/templates
file: gitlab/gitleaks-gitlab-ci.yml
- project: the-foundry/tools/templates
file: gitlab/python-gitlab-ci.yml
gitleaks:
extends: .gitleaks
Full Featured Python + Docker + LangGraph
See references/core-rules.md for complete example.
Best Practices
- Start with minimal - Add templates as needed
- Test locally first - Validate before committing
- Use variables - Don't hardcode values
- Follow template patterns - Extend existing jobs
- Document customizations - Comment why jobs are modified
Related Skills
jcsaaddupuy/duckdb
development
VerifiedTrustedCommunity
DuckDB patterns for JSON/JSONL analysis, array unnesting, and common gotchas. Use when querying JSON files, nested data, or encountering "UNNEST not supported here" errors.
SKILL.mdUpdated May 21, 2026
jcsaaddupuy/mealie
development
VerifiedTrustedCommunity
Mealie recipe manager API: recipes, shopping lists, meal plans. Requires MEALIE_BASE_URL and MEALIE_API_KEY.
SKILL.mdUpdated May 19, 2026
jcsaaddupuy/timewarrior
business
VerifiedTrustedCommunity
TimeWarrior time tracking: start/stop intervals, query durations by tag or issue, compute totals for issue tracker time reporting
SKILL.mdUpdated May 10, 2026
jcsaaddupuy/readeck
development
VerifiedTrustedCommunity
Bookmark manager for saving, searching, and annotating web content. Use when: (1) saving a webpage for later reference, (2) searching previously saved bookmarks, (3) adding highlights/annotations to saved content, (4) user asks to 'bookmark this' or 'save this article'. Requires READECK_BASE_URL and READECK_API_KEY environment variables.
SKILL.mdUpdated May 10, 2026