fai-deploy-preflight — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited fai-deploy-preflight (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Run a comprehensive preflight check before deploying any FAI play infrastructure to Azure.
az bicep build -f infra/main.bicepVerify template compiles without errors.
az deployment group what-if \
-g <resource-group> \
-f infra/main.bicep \
-p infra/parameters.jsonReview planned changes before applying.
🚀 FAI Deploy Preflight — [play name]
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
✅ Bicep validation passed
✅ Parameters validated (12/12 fields)
⚠️ GPU quota: 4/8 vCPUs remaining in eastus
✅ What-if: 7 resources to create, 0 to modify, 0 to delete
✅ Estimated cost: $1,240/month (within budget)
✅ Security: all checks passed
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
RESULT: READY TO DEPLOYIf the preflight check passes but deployment fails:
az deployment group show -g <rg> -n <deployment>az deployment group cancel -g <rg> -n <deployment>Add the preflight step before any Azure deployment in your pipeline:
az deployment group create--fail-on-warning true in production pipelines--output json for machine-readable results in automation| Parameter | Default | Description |
|---|---|---|
--play | required | Play ID or path to solution play folder |
--env | staging | Target environment (dev/staging/prod) |
--resource-group | from azure.yaml | Azure resource group name |
--fail-on-warning | true | Treat warnings as errors |
--skip-cost | false | Skip cost estimation (faster) |
--skip-quota | false | Skip quota checks |
--output | text | Output format (text/json/markdown) |
--timeout | 300 | Max seconds for what-if deployment |
| Code | Meaning | Resolution |
|---|---|---|
| PF001 | Bicep compilation error | Fix syntax in infra/main.bicep |
| PF002 | Missing required parameter | Add to infra/parameters.json |
| PF003 | Insufficient quota | Request quota increase or change region |
| PF004 | What-if deployment failed | Check ARM error message for details |
| PF005 | Cost exceeds budget | Right-size resources or increase budget |
| PF006 | Security check failed | Enable private endpoints and managed identity |
| PF007 | Region not available | Choose different Azure region |
| PF008 | API version mismatch | Update Bicep to latest provider versions |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.