# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Resources for DevOps / SRE or ML / AI, Tagged `ci/cd`: 26 items.

> - DevOps / SRE: Deployment, monitoring, cloud resources and reliability.
> - ML / AI: Model training, evaluation and LLM application development.

- [GitHub CLI](https://hebbmind.com/ru/cli/gh.md): [CLI] GitHub's official CLI: manage pull requests, issues, releases and Actions workflows from the terminal. Most commands support --json output that agents can parse, and an official agent skill is available. Run gh auth login first.
- [GitHub MCP Server](https://hebbmind.com/ru/mcp/github.md): [MCP] GitHub's official MCP server: lets agents read and write repositories and code, manage issues and pull requests, and check Actions workflows and code-scanning alerts. Use the hosted remote server or run it locally in Docker; needs a personal access token or OAuth.
- [act](https://hebbmind.com/ru/cli/act.md): [CLI] Runs GitHub Actions workflows locally in Docker, so you can test .github/workflows changes without repeated commits and pushes, or use workflows as a local task runner. Needs Docker installed.
- [Cline CLI](https://hebbmind.com/ru/cli/cline-cli.md): [CLI] Official Cline CLI sharing its agent core with the VS Code extension: plan/act modes, MCP, checkpoints and subagents; --yolo and --json run it unattended in CI and scripts. Sign in with Cline or a ChatGPT subscription, or bring your own API key.
- [fastlane](https://hebbmind.com/ru/cli/fastlane.md): [CLI] Release automation for iOS and Android: lanes orchestrate builds, code signing management, screenshot generation and uploads to the App Store and Google Play, and agents can call a project's existing lanes directly.
- [GitLab](https://hebbmind.com/ru/plugin/gitlab.md): [Plugin] Connects GitLab's official remote MCP server (beta) so Claude can work with repos, merge requests, CI/CD pipelines, issues and wikis on GitLab.com. MCP access must be enabled on the top-level group, with browser OAuth. In Anthropic's official plugin marketplace.
- [just](https://hebbmind.com/ru/cli/just.md): [CLI] Command runner that saves and runs project commands in a justfile, with make-inspired but simpler syntax. Agents can use just --list to discover a project's build, test and deploy commands and run them directly.
- [mise](https://hebbmind.com/ru/cli/mise.md): [CLI] Polyglot dev environment manager: declare Node, Python, Go and other tool versions, environment variables and project tasks in mise.toml; mise exec and mise run install tools on demand and run them, with one config shared by local and CI.
- [Grafana k6](https://hebbmind.com/ru/cli/k6.md): [CLI] Grafana's load and performance testing tool: write test scripts in JavaScript covering HTTP, WebSocket, gRPC and browsers, set threshold assertions and run them in CI.
- [promptfoo](https://hebbmind.com/ru/cli/promptfoo.md): [CLI] CLI and library for evaluating and red-teaming LLM apps: compare prompts and model outputs in bulk, scan for security vulnerabilities and plug into CI/CD, with evals running locally. Now part of OpenAI and still open source under MIT.
- [Dagger](https://hebbmind.com/ru/cli/dagger.md): [CLI] Programmable software delivery engine: write build, test and release pipelines with SDKs in Go, Python, TypeScript and five other languages, all running in containers so local and CI behave the same, with built-in OpenTelemetry tracing. Needs a container runtime such as Docker.
- [Grype](https://hebbmind.com/ru/cli/grype.md): [CLI] Scans container images, filesystem directories and SBOMs for known vulnerabilities across major Linux distro packages and many language ecosystems, ranks risk by EPSS and KEV, and filters results with OpenVEX. Good for vulnerability gates in CI. Maintained by Anchore.
- [Infracost](https://hebbmind.com/ru/cli/infracost.md): [CLI] Estimates cloud costs of Terraform, Terragrunt, CloudFormation and AWS CDK changes before deployment and checks them against FinOps policies, in the terminal, editor, AI agents or CI. Requires an Infracost account; a free tier is available.
- [Atlas](https://hebbmind.com/ru/cli/atlas.md): [CLI] Manage database schemas as code: declare the desired schema in SQL, HCL or your ORM and Atlas plans, lints and applies migrations, and can export existing databases as HCL, SQL or Mermaid ER diagrams. Supports PostgreSQL, MySQL and a dozen other databases.
- [App Store Connect CLI](https://hebbmind.com/ru/cli/app-store-connect-cli.md): [CLI] asc CLI for scripting the App Store Connect API: manage builds, TestFlight, metadata, signing and review submissions to automate iOS and macOS releases from the terminal or CI. Ships with a companion agent skill pack. Needs an App Store Connect API key.
- [Agentic Actions Auditor](https://hebbmind.com/ru/skill/agentic-actions-auditor.md): [Skill] Trail of Bits skill that audits GitHub Actions workflows wired to AI coding agents (Claude Code Action, Codex, Gemini CLI and others) for prompt injection, env-variable relays, dangerous sandbox settings, wildcard allowlists and other privilege risks.
- [zizmor](https://hebbmind.com/ru/cli/zizmor.md): [CLI] Static security analysis for CI/CD config: finds template injection, credential leaks, excessive permissions and more in GitHub Actions workflows, also covers Dependabot and pre-commit configs, and auto-fixes some findings.
- [GitHub Agentic Workflows](https://hebbmind.com/ru/cli/gh-aw.md): [CLI] GitHub's official gh extension for writing Actions workflows in Markdown that AI agents execute, compiled into standard Actions. Choose engines like Copilot, Claude Code or Codex; runs in a read-only sandbox by default. Requires gh.
- [lychee](https://hebbmind.com/ru/cli/lychee.md): [CLI] Fast async link checker written in Rust that scans websites and Markdown, HTML and other files for broken links and email addresses, with JSON output, config files and an official GitHub Action, often wired into docs CI.
- [Terraform Skill](https://hebbmind.com/ru/skill/terraform-skill.md): [Skill] Terraform and OpenTofu best practices from Anton Babenko: diagnoses the failure mode first, then guides testing, module structure, state management, CI/CD and security scanning. Works for AWS, Azure and GCP.
- [Azure DevOps MCP Server](https://hebbmind.com/ru/mcp/azure-devops-mcp.md): [MCP] Microsoft's official Azure DevOps MCP server: query and act on work items, repos, pull requests, build pipelines, test plans and wikis. Sign in with a Microsoft account that has access on first use; Microsoft recommends the no-install remote version instead.
- [GitLab MCP Server](https://hebbmind.com/ru/mcp/gitlab-mcp.md): [MCP] Community-maintained GitLab MCP server: manage projects, merge requests, issues, pipelines, wikis and releases, with support for self-hosted instances and a read-only mode. Needs a GitLab personal access token or OAuth.
- [Railway CLI](https://hebbmind.com/ru/cli/railwayapp-cli.md): [CLI] Railway's official CLI: deploy with railway up and manage infrastructure config, with token auth for non-interactive CI runs. The installer can set up the Railway skill and MCP for Claude Code, Codex and others in one step. Needs a Railway account.
- [Argo CD MCP Server](https://hebbmind.com/ru/mcp/mcp-for-argocd.md): [MCP] Manage Argo CD in natural language: list and inspect applications, create, update and delete them and trigger syncs, and view resource trees, workload logs and events. Maintained by Argo Project Labs; needs your Argo CD URL and an API token, with an optional read-only mode.
- [Vercel Plugin](https://hebbmind.com/ru/plugin/vercel-plugin.md): [Plugin] Vercel's official plugin: a knowledge graph of the Vercel ecosystem, dozens of skills, expert subagents for deployment and performance, and commands for deploys, env vars and project status, covering Next.js, the AI SDK, storage and CI/CD. Needs Node.js 18+ and Bun; telemetry is opt-out.
- [MCP Server Plugin for Jenkins](https://hebbmind.com/ru/mcp/mcp-server-plugin.md): [MCP] Jenkins plugin that turns Jenkins itself into an MCP server: agents can list jobs, trigger and rerun builds, page through and search build logs, and view test results and SCM info. Hosted in the official jenkinsci organization; authenticates with a Jenkins API token over Basic auth.
