pdlc-ship — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited pdlc-ship (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
串联发布一个版本所需的所有步骤:跑测试 → 升级 VERSION → 更新 CHANGELOG → 创建 tag → 推送触发 CI/CD。
<!-- @include templates/prompts/iron-law.md -->
master / main(参考 CLAUDE.md §5)git status clean)docs/.pdlc-state/ 下是否有未完成的功能(current_stage 不在 [*_done] 的)必须主动询问用户(不得默认跳过,也不得默认强制跑):
📦 发布前测试门检查:是否先跑全量单测 + E2E 测试?
[选项 A] 跑测试(推荐)
→ 后端:./gradlew test 或 mvn test
→ 前端:pnpm test 或 npm test
→ E2E:pnpm exec playwright test(如有)
[选项 B] 跳过测试 —— 仅适用于生产 hotfix
→ 理由:<请说明>
→ 自动记录到 commit 消息
请选择 A 或 B。若选 B:$ARGUMENTS 必须含 --skip-tests 且有理由说明,否则中止。
VERSION 文件$ARGUMENTS 带 --version x.y.z,用指定值;否则按语义化规则建议:VERSIONdocs/.pdlc-state/ 自上次 tag 以来所有 current_stage 在 [*_done] 的功能stage 分组(feature → "新增",fix → "修复",refactor → "重构")[未发布] 段[未发布] 改为 [<new-version>] - <今日日期>git add VERSION CHANGELOG.md
git commit -m "release: v<new-version>"
git tag -a "v<new-version>" -m "Release v<new-version>"若选项 B(跳过测试):commit 消息末尾追加 [skip-tests: <理由>]。
若项目尚未有 CI 配置,根据技术栈生成对应的 CI 文件:
GitHub Actions(.github/workflows/ci.yml):
GitLab CI(.gitlab-ci.yml):
Jenkins(Jenkinsfile)/ 云效 / 其他:按项目已有约定生成。
若已有 CI 配置,检查是否覆盖本次新增的功能/测试路径,必要时更新。 生成后在 docs/05_deployment/ci-cd/ 下记录流水线使用说明。
<!-- @include templates/prompts/self-audit.md -->
发布自检清单:
git tag -l v<new-version> 返回非空)[skip-tests] 标记<!-- @include templates/prompts/loop-prevention.md -->
针对未通过项:
<!-- @include templates/prompts/state-update.md -->
本阶段状态机更新:对所有本次发布涉及的功能,追加 { "stage": "ship", ... } 到其 history。
<!-- @include templates/prompts/handoff.md -->
本命令的 handoff 输出:
✅ 发布准备完成:v<new-version>
- VERSION:已更新
- CHANGELOG:已追加
- Tag:v<new-version> 已创建
- 测试:<通过 / [skip-tests: 理由]>
📦 状态机:已更新 <N> 个功能
👉 下一步:/pdlc-deploy v<new-version>(或手动 git push origin v<new-version> 触发 CI)参数:$ARGUMENTS
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.