ci-cd-pipeline-builder

name: ci-cd-pipeline-builderdescription: >  Design and generate CI/CD pipelines from project stack signals across GitHub Actions, GitLab  CI, CircleCI, and Buildkite. Use when bootstrapping CI, migrating pipelines, adding  deployment gates, or optimizing build times.license: MIT + Commons Clausemetadata:   version: 1.1.0  author: borghei  category: engineering  domain: devops  tier: POWERFUL  updated: 2026-06-17  frameworks: github-actions, gitlab-ci, circleci, buildkite  tags:     - ci-cd    - github-actions    - gitlab-ci    - circleci    - pipelines

CI/CD Pipeline Builder

Generate production-grade CI/CD pipelines from detected project stack signals. Analyzes lockfiles, manifests, and scripts to produce optimized pipelines with proper caching, matrix strategies, security scanning, and deployment gates. Supports GitHub Actions, GitLab CI, CircleCI, and Buildkite with deployment strategies including blue-green, canary, and rolling updates.

Keywords: CI/CD, GitHub Actions, GitLab CI, pipeline, deployment, caching, matrix builds, blue-green deployment, canary deployment, security scanning, SAST, container builds, environment gates

Core Capabilities

• Stack detection — infer language/runtime, package manager, build/test/lint commands, framework, and infrastructure (Docker, K8s, Terraform) from lockfiles and manifests.
• Pipeline generation — lint/test/build/deploy stages with correct dependencies, caching, matrix builds, artifact passing, and conditional execution.
• Deployment strategies — blue-green, canary, rolling updates, recreate, feature-flag integration, and manual approval gates.
• Security integration — SAST (CodeQL, Semgrep, Snyk), dependency and container scanning (Trivy, Grype), secret scanning, and SBOM generation.
• Optimization — caching matched to package manager, path filtering, concurrency control, and fail-fast matrices.

When to Use

• Bootstrapping CI/CD for a new repository
• Migrating between CI platforms
• Optimizing slow or flaky pipelines
• Adding deployment stages to an existing CI-only pipeline
• Implementing security scanning in the pipeline
• Setting up multi-environment deployment (staging, production)

Clarify First

Before generating the pipeline, settle the inputs below. When one is missing or vague and would change the result, ask about it; when it wouldn't, use a sensible default and say which one you used.

• Target platform: GitHub Actions, GitLab CI, CircleCI, or Buildkite (sets the YAML dialect pipeline_generator.py emits via --platform).
• Project stack: language/runtime, package manager, and whether Docker/K8s/Terraform are present (drives stack detection, caching, and which stages are generated).
• Deployment strategy & gates: blue-green, canary, rolling, or CI-only, plus any manual approval gates (determines the deploy stages and conditions).

Ask about the two or three inputs that matter most for this request, not the whole list. If the user wants a result straight away, produce it and state your assumptions at the top.

Tools

References

Load the reference that matches the task — keep this file lean and pull detail on demand:

• references/pipeline-templates.md — stack-detection heuristics, full GitHub Actions templates (Node.js/pnpm/Next.js and Python/uv/FastAPI), the GitLab CI equivalent, the caching strategy reference table, pipeline optimization techniques, and the deployment-strategy decision framework. Read when generating a pipeline or choosing a deployment strategy.
• references/quality-and-operations.md — pre-merge validation checklist, common pitfalls, best practices, troubleshooting table, and success criteria. Read before merging a generated pipeline or when one misbehaves.

Scope & Limitations

This skill covers:

• Generating CI/CD pipelines for GitHub Actions, GitLab CI, CircleCI, and Buildkite
• Stack detection from lockfiles, manifests, Dockerfiles, and infrastructure-as-code definitions
• Deployment strategy selection (blue-green, canary, rolling, recreate) with decision framework
• Pipeline optimization including caching, matrix builds, path filtering, and concurrency control

This skill does NOT cover:

• Runtime infrastructure provisioning or cloud resource management (see engineering/saas-scaffolder)
• Application-level security hardening beyond CI-integrated scanning (see engineering/skill-security-auditor)
• Monitoring, alerting, and observability configuration after deployment (see engineering/observability-designer)
• Database migration orchestration during deployments (see engineering/migration-architect)

Integration Points