release — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited release (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Automate the release process for the Madeinoz Knowledge System, including version synchronization across all files, git tagging, and triggering the CI workflow.
Use this skill when:
The following files MUST be updated with the new version:
"version": "X.Y.Z" LABEL version="X.Y.Z" pack-id: madeinoz67-madeinoz-knowledge-system-core-vX.Y.Z version: X.Y.Z image: ghcr.io/madeinoz67/madeinoz-knowledge-system:X.Y.ZNote: All other docker-compose files use :latest tag and do NOT need updates.
Before creating a release, verify:
# 1. Check you're on main branch
git branch --show-current # Should output: main
# 2. Pull latest changes
git pull origin main
# 3. Verify working tree is clean (no uncommitted changes)
git status # Should show: "nothing to commit, working tree clean"
# 4. Verify latest CI passed
gh run list --limit 1 # Check status is "completed success"Manually edit the version files listed above. For example, bumping from 1.8.0 to 1.9.0:
# Edit package.json
# Edit docker/Dockerfile
# Edit README.md
# Edit src/skills/SKILL.md
# Edit src/skills/server/docker-compose-production.ymlgit add package.json docker/Dockerfile README.md src/skills/SKILL.md src/skills/server/docker-compose-production.yml
git commit -m "chore: bump version to X.Y.Z"# Single-line description
git tag -a vX.Y.Z -m "Release vX.Y.Z"
# OR multi-line description (opens editor)
git tag -a vX.Y.ZIn the editor, use this format:
Release X.Y.Z
Summary of what's in this release:
- Feature one
- Bug fix two
- Improvement threegit push origin vX.Y.ZThis triggers the CI workflow which:
After pushing the tag:
# Watch workflow run
gh run watch
# Confirm release created
gh release view vX.Y.Z
# Verify Docker image on GHCR
# https://github.com/madeinoz67/madeinoz-knowledge-system/pkgs/container/madeinoz-knowledge-systemgh release create Directly❌ Wrong: gh release create vX.Y.Z --notes "Release notes"
This creates the tag via GitHub API without triggering the CI workflow. The release job will never run, leaving a broken release (no Docker image pushed, no docs deployed).
✅ Correct: git push origin vX.Y.Z
This triggers the push event for the tag, which runs the CI workflow.
❌ Wrong: Manually editing CHANGELOG.md
This file is auto-generated by git-cliff during the CI workflow. Manual edits will be overwritten.
✅ Correct: Use conventional commit messages. The changelog is generated from commit history.
Ensure all version files use the exact same version string:
"version": "1.9.0"LABEL version="1.9.0"pack-id: madeinoz67-madeinoz-knowledge-system-core-v1.9.0"version: 1.9.0The docker-compose-production.yml file pins specific versions. Remember to update this file when releasing, as it's used for production deployments.
| Type | Example | When |
|---|---|---|
| Major | 1.8.0 → 2.0.0 | Breaking changes |
| Minor | 1.8.0 → 1.9.0 | New features, backward compatible |
| Patch | 1.8.0 → 1.8.1 | Bug fixes, small improvements |
# Full release workflow (replace X.Y.Z with actual version)
# 1. Edit version files
vim package.json docker/Dockerfile README.md src/skills/SKILL.md src/skills/server/docker-compose-production.yml
# 2. Commit changes
git add package.json docker/Dockerfile README.md src/skills/SKILL.md src/skills/server/docker-compose-production.yml
git commit -m "chore: bump version to X.Y.Z"
# 3. Create annotated tag
git tag -a vX.Y.Z -m "Release vX.Y.Z"
# 4. Push tag to trigger CI
git push origin vX.Y.Z
# 5. Verify
gh run watch
gh release view vX.Y.Z~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.