novotnyllc/dotnet-devops
plugins/dotnet-artisan/skills/dotnet-devops/SKILL.md
Configures .NET CI/CD pipelines (GitHub Actions with setup-dotnet, NuGet cache, reusable workflows; Azure DevOps with DotNetCoreCLI, templates, multi-stage), containerization (multi-stage Dockerfiles, Compose, rootless), packaging (NuGet authoring, source generators, MSIX signing), release management (NBGV, SemVer, changelogs, GitHub Releases), and observability (OpenTelemetry, health checks, structured logging, PII). Spans 18 topic areas. Do not use for application-layer API or UI implementation patterns.
$ install --global
skillsauthnpx skillsauth add novotnyllc/dotnet-artisan dotnet-devopsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 1, 2026, 7:48 AM198.1s20 files scanned
SKILL.md
- name:
- dotnet-devops
- description:
- Configures .NET CI/CD pipelines (GitHub Actions with setup-dotnet, NuGet cache, reusable workflows; Azure DevOps with DotNetCoreCLI, templates, multi-stage), containerization (multi-stage Dockerfiles, Compose, rootless), packaging (NuGet authoring, source generators, MSIX signing), release management (NBGV, SemVer, changelogs, GitHub Releases), and observability (OpenTelemetry, health checks, structured logging, PII). Spans 18 topic areas. Do not use for application-layer API or UI implementation patterns.
- license:
- MIT
- user-invocable:
- false
dotnet-devops
Overview
CI/CD, packaging, release management, and operational tooling for .NET. This consolidated skill spans 18 topic areas. Load the appropriate companion file from references/ based on the routing table below.
Routing Table
| Topic | Keywords | Description | Companion File | |-------|----------|-------------|----------------| | GHA build/test | setup-dotnet, NuGet cache, reporting | GitHub Actions .NET build/test (setup-dotnet, NuGet cache, reporting) | references/gha-build-test.md | | GHA deploy | Azure Web Apps, GitHub Pages, containers | GitHub Actions deployment (Azure Web Apps, GitHub Pages, containers) | references/gha-deploy.md | | GHA publish | NuGet push, container images, signing, SBOM | GitHub Actions publishing (NuGet push, container images, signing, SBOM) | references/gha-publish.md | | GHA patterns | reusable workflows, composite, matrix, cache | GitHub Actions composition (reusable workflows, composite, matrix, cache) | references/gha-patterns.md | | ADO build/test | DotNetCoreCLI, Artifacts, test results | Azure DevOps .NET build/test (DotNetCoreCLI, Artifacts, test results) | references/ado-build-test.md | | ADO publish | NuGet push, containers to ACR | Azure DevOps publishing (NuGet push, containers to ACR) | references/ado-publish.md | | ADO patterns | templates, variable groups, multi-stage | Azure DevOps composition (templates, variable groups, multi-stage) | references/ado-patterns.md | | ADO unique | environments, approvals, service connections | Azure DevOps exclusive features (environments, approvals, service connections) | references/ado-unique.md | | Containers | multi-stage Dockerfiles, SDK publish, rootless | .NET containerization (multi-stage Dockerfiles, SDK publish, rootless) | references/containers.md | | Container deployment | Compose, health probes, CI/CD pipelines | Container deployment (Compose, health probes, CI/CD pipelines) | references/container-deployment.md | | NuGet authoring | SDK-style, source generators, multi-TFM | NuGet package authoring (SDK-style, source generators, multi-TFM) | references/nuget-authoring.md | | MSIX | creation, signing, Store, sideload, auto-update | MSIX packaging (creation, signing, Store, sideload, auto-update) | references/msix.md | | GitHub Releases | creation, assets, notes, pre-release | GitHub Releases (creation, assets, notes, pre-release) | references/github-releases.md | | Release management | NBGV, SemVer, changelogs, branching | Release lifecycle (NBGV, SemVer, changelogs, branching) | references/release-management.md | | Observability | OpenTelemetry, health checks, custom metrics | Observability (OpenTelemetry, health checks, custom metrics) | references/observability.md | | Structured logging | aggregation, sampling, PII, correlation | Log pipelines (aggregation, sampling, PII, correlation) | references/structured-logging.md | | Add CI | CI/CD scaffold, GHA vs ADO detection | CI/CD scaffolding (GHA vs ADO detection, workflow templates) | references/add-ci.md | | GitHub docs | README badges, CONTRIBUTING, templates | GitHub documentation (README badges, CONTRIBUTING, templates) | references/github-docs.md |
Scope
- GitHub Actions workflows (build, test, deploy, publish)
- Azure DevOps pipelines (build, test, publish, environments)
- Container builds and deployment (Docker, Compose)
- NuGet and MSIX packaging
- Release management (NBGV, SemVer, changelogs)
- Observability and structured logging (OpenTelemetry)
- GitHub repository documentation and CI scaffolding
Out of scope
- API/backend code patterns -> [skill:dotnet-api]
- Build system authoring -> [skill:dotnet-tooling]
- Test authoring -> [skill:dotnet-testing]
Related Skills
novotnyllc/dotnet-sentinel-test
tools
VerifiedTrustedCommunity
Test-only skill for verifying sibling file access in Copilot CLI
204SKILL.mdUpdated May 1, 2026
novotnyllc/using-dotnet
development
VerifiedTrustedCommunity
Detects .NET intent for any C#, ASP.NET Core, EF Core, Blazor, MAUI, Uno Platform, WPF, WinUI, SignalR, gRPC, xUnit, NuGet, or MSBuild request from prompt keywords and repository signals (.sln, .csproj, global.json, .cs files). First skill to invoke for all .NET work — loads version-specific coding standards and routes to domain skills via [skill:dotnet-advisor] before any planning or implementation. Do not use for clearly non-.NET tasks (Python, JavaScript, Go, Rust, Java).
204SKILL.mdUpdated May 1, 2026
novotnyllc/dotnet-ui
tools
VerifiedTrustedCommunity
Builds .NET UI apps across Blazor (Server, WASM, Hybrid, Auto), MAUI (XAML, MVVM, Shell, Native AOT), Uno Platform (MVUX, Extensions, Toolkit), WPF (.NET 8+, Fluent theme), WinUI 3 (Windows App SDK, MSIX, Mica/Acrylic, adaptive layout), and WinForms (high-DPI, dark mode) with JS interop, accessibility (SemanticProperties, ARIA), localization (.resx, RTL), platform bindings (Java.Interop, ObjCRuntime), and framework selection. Spans 20 topic areas. Do not use for backend API design or CI/CD pipelines.
204SKILL.mdUpdated May 1, 2026
novotnyllc/dotnet-tooling
tools
VerifiedTrustedCommunity
Manages .NET SDK installation (dotnet-install, workloads), project setup (.slnx, Directory.Build.props, CPM), MSBuild authoring, build optimization, performance (Span, ArrayPool, stackalloc), profiling (dotnet-counters, dotnet-trace), Native AOT/trimming, GC tuning, CLI apps (System.CommandLine, Spectre.Console, Terminal.Gui), ILSpy decompilation, VS Code debug config (launch.json, coreclr, remote), C# LSP (csharp-ls, OmniSharp), and version detection/upgrade. Spans 34 topic areas. Do not use for UI implementation or API security design.
204SKILL.mdUpdated May 1, 2026