Tag: ci/cd

GitHub's official CLI: manage pull requests, issues, releases and Actions workflows from the terminal. Most commands support --json output that agents can parse, and an official agent skill is available. Run gh auth login first.

GitHub's official MCP server: lets agents read and write repositories and code, manage issues and pull requests, and check Actions workflows and code-scanning alerts. Use the hosted remote server or run it locally in Docker; needs a personal access token or OAuth.

Runs GitHub Actions workflows locally in Docker, so you can test .github/workflows changes without repeated commits and pushes, or use workflows as a local task runner. Needs Docker installed.

Official Cline CLI sharing its agent core with the VS Code extension: plan/act modes, MCP, checkpoints and subagents; --yolo and --json run it unattended in CI and scripts. Sign in with Cline or a ChatGPT subscription, or bring your own API key.

Official CLI (bru) for the open-source API client Bruno: runs collections stored as plain text in your repo, switches environments, outputs JSON results and imports collections from OpenAPI, making API tests easy to run in CI.

Release automation for iOS and Android: lanes orchestrate builds, code signing management, screenshot generation and uploads to the App Store and Google Play, and agents can call a project's existing lanes directly.

Connects GitLab's official remote MCP server (beta) so Claude can work with repos, merge requests, CI/CD pipelines, issues and wikis on GitLab.com. MCP access must be enabled on the top-level group, with browser OAuth. In Anthropic's official plugin marketplace.

Command runner that saves and runs project commands in a justfile, with make-inspired but simpler syntax. Agents can use just --list to discover a project's build, test and deploy commands and run them directly.

Polyglot dev environment manager: declare Node, Python, Go and other tool versions, environment variables and project tasks in mise.toml; mise exec and mise run install tools on demand and run them, with one config shared by local and CI.

Grafana's load and performance testing tool: write test scripts in JavaScript covering HTTP, WebSocket, gRPC and browsers, set threshold assertions and run them in CI.

CLI and library for evaluating and red-teaming LLM apps: compare prompts and model outputs in bulk, scan for security vulnerabilities and plug into CI/CD, with evals running locally. Now part of OpenAI and still open source under MIT.

Define and run chains of HTTP requests in plain text files, capture variables and assert on status codes, headers and JSONPath or XPath results, for both fetching data and API testing in CI. Open source from Orange.

Semantic multi-language static analysis: find vulnerabilities and bugs with rules that look like source code, across 30+ languages with custom rules. Scans locally by default without uploading code; cross-file analysis and Pro rules require sign-in.

Programmable software delivery engine: write build, test and release pipelines with SDKs in Go, Python, TypeScript and five other languages, all running in containers so local and CI behave the same, with built-in OpenTelemetry tracing. Needs a container runtime such as Docker.

Scans container images, filesystem directories and SBOMs for known vulnerabilities across major Linux distro packages and many language ecosystems, ranks risk by EPSS and KEV, and filters results with OpenVEX. Good for vulnerability gates in CI. Maintained by Anchore.

Estimates cloud costs of Terraform, Terragrunt, CloudFormation and AWS CDK changes before deployment and checks them against FinOps policies, in the terminal, editor, AI agents or CI. Requires an Infracost account; a free tier is available.

Manage database schemas as code: declare the desired schema in SQL, HCL or your ORM and Atlas plans, lints and applies migrations, and can export existing databases as HCL, SQL or Mermaid ER diagrams. Supports PostgreSQL, MySQL and a dozen other databases.

asc CLI for scripting the App Store Connect API: manage builds, TestFlight, metadata, signing and review submissions to automate iOS and macOS releases from the terminal or CI. Ships with a companion agent skill pack. Needs an App Store Connect API key.

Trail of Bits skill that audits GitHub Actions workflows wired to AI coding agents (Claude Code Action, Codex, Gemini CLI and others) for prompt injection, env-variable relays, dangerous sandbox settings, wildcard allowlists and other privilege risks.

Static security analysis for CI/CD config: finds template injection, credential leaks, excessive permissions and more in GitHub Actions workflows, also covers Dependabot and pre-commit configs, and auto-fixes some findings.

A prose linter that checks docs against style guides: use ready-made packages like Microsoft and Google or write your own YAML rules. It parses Markdown, AsciiDoc and other formats before checking, runs fully offline, and plugs into editors and CI.

GitHub's official gh extension for writing Actions workflows in Markdown that AI agents execute, compiled into standard Actions. Choose engines like Copilot, Claude Code or Codex; runs in a read-only sandbox by default. Requires gh.

Lingo.dev's official CLI: lingo push sends JSON, YAML, Markdown, PO, XLIFF, Android/Xcode strings and other files from your repo to its LLM localization engine, and lingo pull brings translations back; CI-ready. Needs a Lingo.dev account; usage-based pricing with a free sandbox.

Fast async link checker written in Rust that scans websites and Markdown, HTML and other files for broken links and email addresses, with JSON output, config files and an official GitHub Action, often wired into docs CI.