Gem Devops Guidelines
GitHubOfficialFirst committed by mubaidrDistributed by GitHub
- Skill
- Guidelines
- Cloud and DevOps
- MIT
- No issues found
AutoGineer summary
Written by AutoGineer from the skill’s own files, not by the author
This skill provides a structured framework for managing the full lifecycle of software deployments. It covers essential DevOps practices including infrastructure design, containerization, Kubernetes configuration, CI/CD pipeline structure, and mobile release management. The guidelines emphasize safety through rollback planning, health monitoring, and environment-specific configurations, ensuring production readiness across various platforms.
What it does
- Provides a six-step workflow for planning and executing deployments safely.
- Outlines best practices for Docker builds and Kubernetes probe configurations.
- Defines standard CI/CD pipeline stages from pull request to production.
- Offers checklists for pre-deployment, post-deployment, and production readiness.
- Details specific strategies for feature flag management and lifecycle.
- Covers mobile release procedures using industry-standard tools for iOS and Android.
When to use it
- When designing or reviewing infrastructure and deployment pipelines.
- When setting up containerized environments or Kubernetes workloads.
- When establishing production readiness standards for new services.
- When planning mobile application release and update strategies.
- When defining rollback procedures and health check requirements.
Advantages
- Promotes consistent, repeatable deployment processes.
- Reduces risk through mandatory rollback planning and validation gates.
- Encourages secure configuration management by avoiding hard-coded secrets.
- Provides clear, actionable checklists for complex release scenarios.
- Supports zero-downtime strategies like rolling, blue-green, and canary deployments.
Usage examples
- “How should I structure my CI/CD pipeline for a new web service?”
- The agent will outline a pipeline starting with linting, type checking, and unit tests for pull requests, followed by build, staging, smoke tests, and production deployment for the main branch.
- “What are the best practices for Dockerizing my application?”
- The agent will recommend using multi-stage builds, non-root users, pinning base images by digest, and defining health checks and resource limits.
- “How do I manage feature flags safely?”
- The agent will provide a lifecycle strategy including phased rollouts, owner assignment, expiration dates, and a requirement to remove dead code within two weeks.
- “What should I include in my production readiness checklist?”
- The agent will list requirements such as passing tests, JSON logging, meaningful health endpoints, pinned versions, resource limits, and a tested rollback plan.
Install
Download the skill as a ZIP:
https://mp-staging.autogineer.com/agent-skills/github/gem-devops-guidelines/downloadUnzip it into the cross-client skills folder of your project:
mkdir -p .agents/skills && unzip gem-devops-guidelines.zip -d .agents/skills
Documentation by mubaidr
DevOps Guidelines
When to Use
Use for DevOps, platform, container, pipeline, or release tasks - any work that touches infrastructure, deployment, CI/CD, Docker, Kubernetes, health checks, rollback, feature flags, production readiness, or mobile release workflows.
Numbered Workflow
Assess - identify workload type, target provider/environment, acceptance criteria, and risk level.
Classify - select applicable sections (deployment strategy, Docker, K8s, CI/CD, health, config, rollback, feature flags, mobile) based on workload/provider/environment.
Plan - for each selected section, define concrete steps, validation checks, and rollback triggers.
Apply - execute the plan, running validation at each gate (lint -> typecheck -> unit -> integration -> preview -> smoke).
Verify - confirm health endpoints, monitoring, rollback capability, and documented outcome.
Rollback-ready - ensure a tested rollback path exists before declaring success.
Edge Cases
Idempotent re-run: workflow must be safe to execute multiple times without side effects.
Missing credentials: fail fast with clear error; never proceed with partial auth.
Workload without health endpoint: deploy but flag as incomplete; require health endpoint before production promotion.
Image digest pinning: always pin by digest (
image@sha256:...) not tag for production.Phased rollout rollback: if canary/blue-green rollout fails, revert traffic split instantly; do not wait for full rollback.
Apply only sections relevant to workload/provider/environment/acceptance criteria. Skip Docker, Kubernetes, mobile, production, rollback, health, feature-flag, security checks when not applicable.
Deployment strategy
Rolling (default): gradual, zero-downtime replacement.
Blue-green: duplicate environments, atomic cutover, instant rollback, 2x infra.
Canary: route small % first; requires traffic splitting.
Docker
Pin base-image tags (
node:22-alpine); NEVER:latest.Multi-stage builds + non-root user. Copy deps first for caching.
.dockerignore:node_modules,.git, tests. DefineHEALTHCHECK+ resource limits.
Kubernetes
Configure startup, readiness, liveness probes with workload-appropriate initial delays/thresholds.
CI/CD
PR: lint -> typecheck -> unit -> integration -> preview.
Main: build -> staging -> smoke -> production.
Health and shutdown
Simple:
GET /health->{ "status": "ok" }.Detailed: dependencies, uptime, version.
Services MUST expose meaningful health + gracefully handle
SIGTERMwhen workload requires it.
Configuration
Use environment variables (Twelve-Factor), separated by environment. Validate at startup + fail fast. NEVER commit secrets or hard-code NODE_ENV=production.
Rollback
Kubernetes:
kubectl rollout undo.Vercel:
vercel rollback.Docker: redeploy previous pinned image.
Feature Flags
Lifecycle: create -> enable -> 5% -> 25% -> 50% -> 100% -> remove flag + dead code.
Every flag MUST have owner, expiration, rollback trigger. Remove within two weeks.
Checklists
Pre-deploy: passing tests, code review, env vars, migrations, rollback plan.
Post-deploy: healthy, monitored, old pods terminated, outcome documented.
Production: passing tests; no hardcoded secrets; JSON logs; meaningful health; pinned versions; validated env vars; resource limits; TLS; CVE scan; CORS; rate limiting; CSP/HSTS/X-Frame-Options; tested rollback; runbook; on-call.
Apply security/CVE checks to executable or security-sensitive workloads.
Mobile Deployment
EAS:
eas build:configure;eas build -p ios|android --profile preview;eas update --branch production;--auto-submit.Fastlane: iOS
match/cert/sigh/pilot; Android Gradle/supply.Credentials in env/secret storage, never Git. Automate iOS signing with
fastlane match; usekeytool+ Google Play App Signing for Android.TestFlight: internal instant; external 90 days/100 testers. Google Play: internal/beta/production. Expect 1–7 days review.
Rollback: EAS
eas update:rollback; native release -> revert build; store release -> reduce phased rollout.
Files
- ATTRIBUTION.mdAdded by AutoGineer873 B
- LICENSELicence file added by AutoGineer1.0 KiB
- SKILL.md4.4 KiB
ATTRIBUTION.md
Attribution
This folder is an unmodified copy of the Agent Skill "gem-devops-guidelines", distributed by AutoGineer (https://autogineer.com/agent-skills).
Commit: 797337f33f73e35d08d82f840e21c4b8c4932d88
First committed by: mubaidr (https://github.com/mubaidr)
Publisher: GitHub (https://github.com/github)
Licence: MIT License (https://github.com/github/awesome-copilot/blob/797337f33f73e35d08d82f840e21c4b8c4932d88/LICENSE)
Licence evidence: repository licence LICENSE
Retrieved: 2026-11-07
The skill's own files are unmodified copies. AutoGineer is not affiliated with or endorsed by the author or the publisher.
Files added by AutoGineer
ATTRIBUTION.md: this file, written by AutoGineer
LICENSE: copied from LICENSE
Requirements and compatibility
Written for: GitHub Copilot
Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta
“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.
Needs: Needs Node.js
Security
No issues found by our static scan· No issues found
A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.
Attribution and licence
- First committed by
mubaidr
- Publisher
- GitHub (Official)
- Distributed by
- GitHub
- Source
- github/awesome-copilot · skills/gem-devops-guidelines · commit 797337f
- Licence
- MIT License (redistribution allowed)
- LICENSE (added by AutoGineer from LICENSE)
- ATTRIBUTION.md (written by AutoGineer)
- Synced
- Contributors
- mubaidr
AutoGineer is not affiliated with or endorsed by mubaidr or GitHub.
Download ZIP
The ZIP holds the skill’s files, its licence files and an ATTRIBUTION.md. Download gem-devops-guidelines.zip