5a36aa23b7
fix: supply chain hardening — pin actions, images, and fix secret logging
...
Supply chain:
- Pin GitHub Actions to stable releases instead of @master/@main:
trivy-action@0.28 .0, snyk@0.4.0, sonarcloud@v3, dependency-check@v6
- Update EOL actions: upload-artifact v3→v4, codeql/upload-sarif v2→v3,
codecov v3→v4
- Pin container images to specific tags instead of :latest:
kubectl:1.31, vault:1.17, prometheus:v3.2, jaeger:1.62, tempo:2.7,
sonarqube:10.8-community, trivy:0.58.0, trufflehog:3.88, uv:0.6,
temporalio auto-setup:1.26, temporalio ui:2.33
Security:
- Replace echo of secrets in CI examples with env var injection pattern
(secrets-management SKILL.md)
Misc:
- Fix CRLF → LF line endings in deployment-engineer.md
2026-04-19 11:13:46 +00:00
47a5dbc3f9
fix(skills): remove phantom resource references and fix CoC links ( #447 )
...
Remove references to non-existent resource files (references/, assets/,
scripts/, examples/) from 115 skill SKILL.md files. These sections
pointed to directories and files that were never created, causing
confusion when users install skills.
Also fix broken Code of Conduct links in issue templates to use
absolute GitHub URLs instead of relative paths that 404.
2026-03-07 10:53:17 -05:00
65e5cb093a
feat: add Agent Skills and restructure documentation
...
- Add 47 Agent Skills across 14 plugins following Anthropic's specification
- Python (5): async patterns, testing, packaging, performance, UV package manager
- JavaScript/TypeScript (4): advanced types, Node.js patterns, testing, modern JS
- Kubernetes (4): manifests, Helm charts, GitOps, security policies
- Cloud Infrastructure (4): Terraform, multi-cloud, hybrid networking, cost optimization
- CI/CD (4): pipeline design, GitHub Actions, GitLab CI, secrets management
- Backend (3): API design, architecture patterns, microservices
- LLM Applications (4): LangChain, prompt engineering, RAG, evaluation
- Blockchain/Web3 (4): DeFi protocols, NFT standards, Solidity security, Web3 testing
- Framework Migration (4): React, Angular, database, dependency upgrades
- Observability (4): Prometheus, Grafana, distributed tracing, SLO
- Payment Processing (4): Stripe, PayPal, PCI compliance, billing
- API Scaffolding (1): FastAPI templates
- ML Operations (1): ML pipeline workflow
- Security (1): SAST configuration
- Restructure documentation into /docs directory
- agent-skills.md: Complete guide to all 47 skills
- agents.md: All 85 agents with model configuration
- plugins.md: Complete catalog of 63 plugins
- usage.md: Commands, workflows, and best practices
- architecture.md: Design principles and patterns
- Update README.md
- Add Agent Skills banner announcement
- Reduce length by ~75% with links to detailed docs
- Add What's New section showcasing Agent Skills
- Add Popular Use Cases with real examples
- Improve navigation with Core Guides and Quick Links
- Update marketplace.json with skills arrays for 14 plugins
All 47 skills follow Agent Skills Specification:
- Required YAML frontmatter (name, description)
- Use when activation clauses
- Progressive disclosure architecture
- Under 1024 character descriptions
2025-10-16 20:33:27 -04:00
thc1006