microsoft-haste-cicd-instructions.ocm.json json {
"ocm": "1",
"id": "microsoft-haste-cicd-instructions",
"kind": "skill",
"name": "cicd",
"description": "CI/CD & YAML Instructions",
"publisher": "microsoft",
"version": "1.0.0",
"capabilities": {
"domains": [
"general"
],
"tags": [
"skill-md",
"github-instructions"
],
"languages": [
"en"
]
},
"quality_prior": 0.6,
"examples": [
"CI/CD & YAML Instructions"
],
"primary": false,
"metadata": {
"source": {
"provider": "github-instructions",
"repository": "https://github.com/microsoft/haste",
"path": ".github/instructions/cicd.instructions.md",
"ref": "1f1fe0954ce7ad6c6f8e9c22469a5eac64b0bac0",
"url": "https://github.com/microsoft/haste/blob/1f1fe0954ce7ad6c6f8e9c22469a5eac64b0bac0/.github/instructions/cicd.instructions.md",
"key": "microsoft/haste/.github/instructions/cicd.instructions.md"
},
"applies_to": "**/*.yml,**/*.yaml,.github/workflows/**"
},
"instructions": "# CI/CD & YAML Instructions\n\n- Use proper YAML indentation (2 spaces, never tabs).\n- Pin action versions to full SHA hashes for security (e.g., `uses: actions/checkout@abcdef1234567890`).\n- Use environment variables and secrets — never hardcode credentials.\n- Add comments explaining non-obvious workflow steps.\n- Keep workflow files focused — one workflow per concern (CI, deploy, release).\n- Use `permissions` blocks to follow the principle of least privilege.",
"cost": {
"context_tokens": 115
}
}