dso-workflow

Name: dso-workflow
Author: omnigentx

31stars13forks

How to install dso-workflow?

omnigentx/jarvis/dso-workflow

$npx -y skills add omnigentx/jarvis --skill dso-workflow

Installs into the current project.

Summary

DevSecOps workflow for CI/CD, deployment, security review, and infrastructure. Use when DSO needs to manage pipelines, deploy, or review security.

Files · 1

View on GitHub

SKILL.md

1	# DSO Workflow
2
3	## Your Process
4
5	1. Security review → OWASP Top 10, dependency scan, secrets check
6	2. CI/CD pipeline → GitHub Actions setup and validation
7	3. Docker management → Build, configure, optimize containers
8	4. Deployment → Staging → approval → production
9	5. Monitoring → Health checks, log analysis
10
11	## Security Review Checklist
12
13	- [ ] No hardcoded secrets in code
14	- [ ] Dependencies scanned for vulnerabilities
15	- [ ] Input validation on all endpoints
16	- [ ] Authentication/authorization properly implemented
17	- [ ] Docker images use minimal base images
18	- [ ] CORS properly configured
19
20	## CI/CD Pipeline Stages
21
22	```
23	Push → Lint → Test → Build → Deploy (staging) → Approval → Deploy (prod)
24	```
25
26	For pipelines with branching (security gate, manual approval, multi-env)
27	include a Mermaid `flowchart` so reviewers see the gates clearly:
28
29	```mermaid
30	flowchart LR
31	Push --> Lint
32	Lint --> Test
33	Test --> SecScan{Sec scan}
34	SecScan -- pass --> Build
35	SecScan -- fail --> Block[Block + alert]
36	Build --> Staging[Deploy staging]
37	Staging --> Approve{Manual approval}
38	Approve -- yes --> Prod[Deploy prod]
39	Approve -- no --> Hold[Hold]
40	```
41
42	Rules:
43	- ❌ DO NOT hardcode secrets in source → use GitHub Secrets.
44	- ✅ Scan dependencies for vulnerabilities.
45	- ✅ Scan Docker images before deploying.
46	- Staging: auto-deploy on `develop`.
47	- Production: manual approval required.
48	- Rollback: keep 3 previous versions.
49
50	## Deliverables
51
52	\| Output \| Format \|
53	\|--------\|--------\|
54	\| Security review report \| `SECURITY_REVIEW.md` \|
55	\| CI/CD pipeline config \| `.github/workflows/ci.yml` \|
56	\| Deployment runbook \| `DEPLOYMENT.md` \|
57
58	## References
59
60	\| Topic \| File \|
61	\|-------\|------\|
62	\| Code review protocol \| [CODE_REVIEW.md](references/CODE_REVIEW.md) \|
63	\| Git branching & conventions \| [GIT_WORKFLOW.md](references/GIT_WORKFLOW.md) \|
64	\| Terminal execution \| [TERMINAL.md](references/TERMINAL.md) \|
65	\| Meeting protocol \| [MEETING_PROTOCOL.md](references/MEETING_PROTOCOL.md) \|

People who liked this also viewed

6 picks

Type

dso-workflow

31stars13forks

View on GitHub

How to install dso-workflow?

omnigentx/jarvis/dso-workflow

$npx -y skills add omnigentx/jarvis --skill dso-workflow

Installs into the current project.

Summary

DevSecOps workflow for CI/CD, deployment, security review, and infrastructure. Use when DSO needs to manage pipelines, deploy, or review security.

Files · 1

View on GitHub

SKILL.md

1	# DSO Workflow
2
3	## Your Process
4
5	1. Security review → OWASP Top 10, dependency scan, secrets check
6	2. CI/CD pipeline → GitHub Actions setup and validation
7	3. Docker management → Build, configure, optimize containers
8	4. Deployment → Staging → approval → production
9	5. Monitoring → Health checks, log analysis
10
11	## Security Review Checklist
12
13	- [ ] No hardcoded secrets in code
14	- [ ] Dependencies scanned for vulnerabilities
15	- [ ] Input validation on all endpoints
16	- [ ] Authentication/authorization properly implemented
17	- [ ] Docker images use minimal base images
18	- [ ] CORS properly configured
19
20	## CI/CD Pipeline Stages
21
22	```
23	Push → Lint → Test → Build → Deploy (staging) → Approval → Deploy (prod)
24	```
25
26	For pipelines with branching (security gate, manual approval, multi-env)
27	include a Mermaid `flowchart` so reviewers see the gates clearly:
28
29	```mermaid
30	flowchart LR
31	Push --> Lint
32	Lint --> Test
33	Test --> SecScan{Sec scan}
34	SecScan -- pass --> Build
35	SecScan -- fail --> Block[Block + alert]
36	Build --> Staging[Deploy staging]
37	Staging --> Approve{Manual approval}
38	Approve -- yes --> Prod[Deploy prod]
39	Approve -- no --> Hold[Hold]
40	```
41
42	Rules:
43	- ❌ DO NOT hardcode secrets in source → use GitHub Secrets.
44	- ✅ Scan dependencies for vulnerabilities.
45	- ✅ Scan Docker images before deploying.
46	- Staging: auto-deploy on `develop`.
47	- Production: manual approval required.
48	- Rollback: keep 3 previous versions.
49
50	## Deliverables
51
52	\| Output \| Format \|
53	\|--------\|--------\|
54	\| Security review report \| `SECURITY_REVIEW.md` \|
55	\| CI/CD pipeline config \| `.github/workflows/ci.yml` \|
56	\| Deployment runbook \| `DEPLOYMENT.md` \|
57
58	## References
59
60	\| Topic \| File \|
61	\|-------\|------\|
62	\| Code review protocol \| [CODE_REVIEW.md](references/CODE_REVIEW.md) \|
63	\| Git branching & conventions \| [GIT_WORKFLOW.md](references/GIT_WORKFLOW.md) \|
64	\| Terminal execution \| [TERMINAL.md](references/TERMINAL.md) \|
65	\| Meeting protocol \| [MEETING_PROTOCOL.md](references/MEETING_PROTOCOL.md) \|

People who liked this also viewed

6 picks

Type