A skill for Claude Code and Codex · Software and infrastructure
ci-cd-expert is the skill that analyzes your repository, rates the project's maturity, and implements the right pipeline in GitHub Actions: CI with lint, tests, and build from day one, security gates proportional to the risk, and deploys with documented rollback. No enterprise-grade pipeline on a side project, and no product with real users left without a way back.
Solo skill: unlocks right away, no guarantee after download. Purchase terms.
Or get all 25 skills plus 9 bonuses in the Supreme Pack for R$ 497.
The problem
AI-generated pipelines tend to fall into one of two traps: enterprise-grade bureaucracy on a small project, or automated deploys on a product with real users, with no tests, no security, and no way back. Three symptoms, and what changes with the skill.
| Without the skill | With ci-cd-expert |
|---|---|
| A one-person app gets Kubernetes, a permanent staging environment, canary deploys, and a five-version Node test matrix, and nobody can keep any of it running. | Proportionality: the tier comes from the project's actual risk, and the proposal states what won't be included at that tier and why, before anything gets implemented. |
| A workflow with write access to everything, a third-party action pinned to a tag that can change, and a secret interpolated straight into a command. | Minimum permissions per job, actions pinned by SHA, OIDC instead of a long-lived key, and no user-controllable input going raw into a command. |
| The deploy ships straight to the VPS with a git pull and a rebuild on the production machine, with no quick way back when something breaks. | Build on the runner, the same image promoted across environments, a health check after the deploy, and a rollback procedure that's written down and tested. |
What you get out of it
Ready-to-use workflows in your repository and a documented delivery, with what to create and how to roll back.
stack, tests, current deploy, and the pipeline level the project actually needs
lint, typecheck, test, and build, with explicit timeouts and permissions
proportional to the tier, no theater and no gaps
for your target, with a health check and a documented way back
How it works
Scripts, tests that actually run, Dockerfile, any existing workflows, and how the deploy works today, before asking a single question.
Four maturity levels based on the project's actual risk. When torn between two, it picks the lower one, because moving up later is easy and tearing down bureaucracy is hard.
What's going to be implemented, what isn't and why, and the exact name of every secret you need to create.
CI, security, and deploy templates adapted to the repository, never pasted in without adjustment, for a VPS with Docker, Kubernetes, or AWS.
Workflows checked, timeouts and permissions set on every job, the first deploy monitored, and rollback documented.
Before you buy
The most common path is a VPS with Docker Compose, and that's what the skill treats as the default.
Its limits
CI without tests that actually run is theater. If the project has no tests, the minimum gate becomes lint, typecheck, and build, and the skill logs the gap and points to testes-automatizados-expert, also in the catalog.
The pipeline covers the delivery chain. The security of the application itself is the job of security-checklist, also in the catalog.
Changing secrets, branch rules, and doing a real deploy all touch a live environment, so those steps still depend on your explicit approval.
What you receive
The price
Just ci-cd-expert
R$57one time payment
Bought it solo and now want it all? Message me on WhatsApp and I will deduct what you already paid.
Supreme Pack
R$ 1.665R$497or 10x on a card
Buying all 25 solo adds up to R$ 1.665. The pack pays for itself by the ninth skill. See everything the Supreme Pack includes
04 · Software and infrastructure
Before you ask
That's exactly the case it protects. Basic CI with lint, tests, and build is worth having from day one, and a sophisticated deploy setup only comes in once the pain is real.
It does, and that's the default path: VPS with Docker Compose, build on the runner, image pulled onto the VPS, health check, and documented rollback. It also covers Kubernetes, AWS, and serverless when the project calls for it.
Not to get started, but CI without tests that run is theater. Without tests, the minimum gate is lint, typecheck, and build, and the gap gets logged.
Minimum permissions on every workflow, third-party actions pinned by SHA, OIDC instead of long-lived keys, user-controllable input never interpolated into a command, and deploy secrets stored in an environment.
Yes, the license covers your work for third parties. What's off limits is reselling or redistributing the skill.
One-time payment, 12 months of updates. No refunds after download; the Supreme Pack comes with a 7-day guarantee.
