Tổng quan DevOps

Các công cụ hỗ trợ DevOps trong quy trình deploy, bảo mật, và monitoring — cập nhật theo bộ claudekit mới với các skill autonomous deploy (/land-and-deploy), canary monitoring (/canary), CSO security mode.

Cập nhật bộ mới: Bổ sung /land-and-deploy, /canary, /setup-deploy, /cso, /cti-expert, /health, /deploy. Skill /land-and-deploy thay thế quy trình manual “merge → deploy → monitor”.

Các lệnh chính

Deploy Checklist

Trang PrimeCommerce — checklist trước deploy (custom, không phải skill).

Land & Deploy

/land-and-deploy — Merge PR + chờ CI + deploy + canary verify (1 lệnh).

Canary Monitor

/canary — Post-deploy monitoring với screenshot + performance diff.

Security

/cso, /security-scan, /security-audit — STRIDE/OWASP audit đa chiều.

Threat Intel

/cti-expert — Cyber threat intel + OSINT reports.

Health Check

/health — Code quality dashboard 0-10 score với trend.

CI/CD

GitHub Actions + /fix (auto-route CI errors).

Incident Response

/investigate, /day-one-patch, /hotfix — Sự cố production.

Code Quality

/health, /tech-debt — Đánh giá sức khỏe codebase.

Compliance

/security-audit compliance mode — GDPR, SOC2, HIPAA, PCI-DSS.

Performance

/perf-profile, /benchmark — Profiling, load testing.

Deploy Universal

/deploy — Auto-detect platform (Vercel/Netlify/Fly/Render).

Workflow DevOps (bộ mới)

Setup 1 lần cho project

/setup-deploy                     # Cấu hình platform (Vercel/Netlify/Fly/Render)
/setup-browser-cookies            # Import cookies cho auth testing (canary)
/ghpm bootstrap                   # Labels + Projects board

Trước deploy

/qa-full:full                     # Full QA
/qa-full security                 # Security scan
/cso daily                        # CSO daily security audit
/security-scan                    # Secrets + dependency scan
/health                           # Code quality 0-10 score

Deploy (autonomous)

/land-and-deploy                  # Merge PR + CI wait + deploy + canary verify

Thay thế cho quy trình manual: merge → chờ CI → deploy → monitor.

Deploy (manual)

/deploy                           # Auto-detect platform
# HOẶC
/ship official                    # PR về main (không auto-merge)
# ... approve PR ...
gh pr merge --squash              # Merge thủ công

Sau deploy — Canary + monitor

/canary                           # Screenshot + perf diff so với baseline
/health                           # Health dashboard

Alert nếu có regression / anomaly.

Sự cố production

/investigate "<error/incident>"   # Root cause first (iron law)
/guard <affected-dir>             # Safety mode khi debug prod
/day-one-patch                    # Emergency patch workflow
/vibe --ship <hotfix-issue>       # Ship hotfix qua vibe pipeline

Chi tiết skills DevOps mới

/land-and-deploy — Merge + deploy + canary (1 lệnh)

Prefix: /land-and-deployMerge PR → chờ CI → deploy target platform → run canary verify. Đầy đủ safety net.

/setup-deploy                     # 1 lần: cấu hình platform, health check URL
/land-and-deploy                  # Sau khi PR ready

Chạy tự động:

gh pr merge --auto --squash (chờ required checks)
Wait cho deploy workflow trigger
Watch target-branch CI/deploy
Run /canary verify
Report status

Khi dùng: Sau khi PR approved và tests xanh, muốn 1-command deploy.

/canary — Post-deploy monitoring

Prefix: /canaryWatch live app: console errors, performance regression, page failures. Screenshot periodic + so sánh baseline pre-deploy.

/canary                           # After deploy
/canary --baseline pre-deploy     # So với snapshot cũ

Alert khi: anomaly (error rate spike, LCP tăng, resource size tăng đáng kể).

/deploy — Universal auto-detect

Prefix: /deployAuto-detect deployment target từ config files hoặc docs/deployment.md. Support: Vercel, Netlify, Cloudflare, Railway, Fly.io, Render, Heroku, GitHub Pages, AWS, GCP, DigitalOcean, Vultr, Coolify, Dokploy.

/deploy                           # Auto detect + deploy
/deploy vercel                    # Force Vercel
/deploy --preview                 # Preview environment

/setup-deploy — Config platform 1 lần

Prefix: /setup-deployDetect platform, production URL, health check endpoint, deploy status commands. Ghi config vào CLAUDE.md để /land-and-deploy auto.

/setup-deploy                     # Interactive: chọn platform + config

/cso — Chief Security Officer mode

Prefix: /cso daily, /cso comprehensiveInfrastructure-first security: secrets archaeology, dependency supply chain, CI/CD pipeline security, LLM/AI security, skill supply chain scan.

/cso daily                        # Zero-noise, 8/10 confidence gate
/cso comprehensive                # Monthly deep scan, 2/10 bar

2 modes: daily (fast, zero false positive) vs comprehensive (deep, có false positives).Trend tracking across audit runs.

/security-scan + /security-audit

/security-scan                    # Secrets + dependency + OWASP scan
/security-audit                   # Vulnerability audit với remediation guide

/cti-expert — Cyber threat intel + OSINT

Prefix: /cti-expertAnalyze threat intelligence, OSINT cases: exposure review, domain recon, breach check, username/email/phone research, image forensics, blockchain tracing, darknet check, cloud tenant recon, CVE lookup, threat modeling.

/cti-expert "exposure review: primeproduction.com"
/cti-expert "OSINT: username X across platforms"

Khi dùng: Đánh giá exposure, threat modeling, phân tích incidents.

/health — Code quality dashboard

Prefix: /healthWraps existing tools (type checker, linter, test runner, dead code detector, shell linter). Weighted composite 0-10 score. Track trend over time.

/health                           # Full health check
/health --diff                    # So với baseline

/investigate + /guard — Incident response

Prefix: /investigate, /guard

/investigate "<error>"            # Root cause first (iron law)
/guard <affected-dir>             # Full safety mode khi debug prod

/guard = /careful (warn destructive) + /freeze (restrict edit scope).

/day-one-patch + /hotfix — Emergency workflows

Prefix: /day-one-patch, /hotfix

/day-one-patch                    # Prepare day-one patch cho launch
/hotfix                           # Emergency fix workflow với audit trail

/hotfix bypass normal sprint processes, tạo hotfix branch, track approvals, backport correctly.

/perf-profile + /benchmark — Performance

Prefix: /perf-profile, /benchmark

/perf-profile                     # Structured profiling: bottlenecks + budgets
/benchmark                        # Performance regression detection với browse daemon

/benchmark establishes baselines (page load, Core Web Vitals, resource sizes) và diff before/after PR.

/tech-debt — Track + prioritize debt

Prefix: /tech-debtScan for debt indicators, maintain debt register, recommend repayment scheduling.

/tech-debt                        # Full scan
/tech-debt "auth module"          # Scoped

Infrastructure Stack

Thành phần	Công nghệ
CI/CD	GitHub Actions
Container	Docker + Docker Compose
Cloud	Tùy dự án (Vercel, DigitalOcean, AWS, GCP, Fly.io)
Monitoring	Tùy dự án + `/canary` cho canary checks
Secrets	GitHub Secrets / .env (never commit — dùng `/security-scan` để check)

Anthropic Plugin bổ sung

Plugin command	Mô tả
`engineering:deploy-checklist`	Deploy checklist từ Anthropic Plugin
`engineering:incident-response`	Xử lý sự cố production
`devops:kubernetes-audit`	Kubernetes/K8s cluster audit

​Tổng quan DevOps

​Các lệnh chính

Deploy Checklist

Land & Deploy

Canary Monitor

Security

Threat Intel

Health Check

CI/CD

Incident Response

Code Quality

Compliance

Performance

Deploy Universal

​Workflow DevOps (bộ mới)

​Chi tiết skills DevOps mới

​Infrastructure Stack

​Anthropic Plugin bổ sung

Tổng quan DevOps

Các lệnh chính

Workflow DevOps (bộ mới)

Chi tiết skills DevOps mới

Infrastructure Stack

Anthropic Plugin bổ sung