drupal-update-deploy — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited drupal-update-deploy (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use when:
Prerequisites: The following skill sets must be loaded:drupal-maintenance,acli,pipelines-cli.
Ask the user: "Do you need to apply dependency updates first, or are updates already done?"
Always run these before asking the user where to deploy. This ensures the correct application and environment IDs are used.
# List available applications and note the UUID
acli api:applications:listOutput shows application names and UUIDs. Ask the user: "Which application do you want to deploy to?" and confirm the UUID.
# List environments for the selected application
acli api:environments:list <app-uuid>Output shows environment labels (dev, stage, prod, CDEs), IDs, and the currently deployed branch. Ask the user: "Which environment do you want to deploy to?"
Before pushing, check for uncommitted changes:
git statusIf there are uncommitted changes, ask the user: "Do you want to commit these changes before deploying?"
git add -A
git commit -m "<user-provided message>"Push the committed code to the selected environment:
acli push:codeFollow [Pull & Push](../../acli/pull-push/SKILL.md) for full options (selecting environments, handling conflicts).
After pushing, switch the environment to the updated branch using the environment ID from Step 2:
acli api:environments:switchCode <environment-id> --branch=<branch-name>Follow [Environment Management](../../acli/environment-management/SKILL.md) for deploy options.
Ask the user: "Do you want to trigger a pipeline build for the deployed branch?"
pipelines start --application-id=<app-id> --vcs-path=<branch> --tailAfter code is live on the environment (and after any pipeline completes), run database updates and rebuild the cache via Drush:
# SSH into the environment
acli ssh <environment-id>
# Apply pending database updates
drush updb --yes
# Rebuild caches
drush crIf using pipelines: Drush commands may already be included in your pipeline definition. Ask the user: "Does your pipeline run `drush updb` and `drush cr`?" - If yes → skip this step. - If no → run the commands above.
Verify Drush can reach the site and the database schema is up to date:
drush statusExpected output includes Drupal bootstrap: Successful and a Drupal version. If Drush fails to bootstrap, do not proceed — check for errors before marking the deployment complete.
After the pipeline completes (or if skipping pipelines), confirm the environment is running the expected code:
acli api:environments:list <app-uuid>Check the vcs field of the target environment to confirm the branch matches.
| Step | Tool | Skill |
|---|---|---|
| Update packages | composer | drupal-maintenance-security-updates or drupal-maintenance-dependency-updates |
| Fetch application + environments | acli | acli-application-management, acli-environment-management |
| Commit code changes | git | — |
| Push code | acli | acli-pull-push |
| Deploy to environment | acli | acli-environment-management |
| Trigger pipeline | pipelines-cli | pipelines-cli-pipeline-operations |
| Run database updates | drush | drush updb, drush cr |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.