Woodpecker Pipeline Operations

SkillCloud & infra

Design, inspect and operate portable Woodpecker CI pipelines with explicit repository and deployment boundaries.

Available today. Use it from your connected AI after setup.

Connect ahel once, and every AI you use reads what you have installed.

Then ask your AI: use the Woodpecker Pipeline Operations skill

What this skill tells your AI

The instructions your AI receives, as published by seed-forge/harness-ai-kit in skills/infra-woodpecker-pipeline-ops/SKILL.md and read by ahel’s review.

Purpose

Use this Skill to inspect Woodpecker repositories and builds, design a portable CI pipeline, or diagnose build failures. It does not assume a specific Git host, container registry, image repository, internal platform or deployment topology.

Required Configuration

Configure the companion CLI in ~/.harness-ai-kit/config.yaml:

assets:
  woodpeckerctl:
    woodpecker_url: https://ci.example.com/
    woodpecker_token: <store-outside-source-control>

The checked-in config.defaults.yaml is the configuration contract. Use command-line values for a one-off action and environment variables only as CI fallbacks. Do not create a separate ~/.woodpeckerctl source of truth.

Workflow

  1. Identify repository purpose before changing a pipeline: build-only images, libraries and deployed applications have different delivery boundaries.
  2. Use woodpeckerctl doctor, repository inspection and build logs before modifying configuration.
  3. Keep platform credentials in Woodpecker secrets and use secret references in pipeline definitions; never write registry credentials or tokens into a repository.
  4. Keep build integration separate from deployment configuration. Enable a deployment only when its target, approval path and rollback are explicit.
  5. Trigger or observe a build, inspect logs and report the resulting artifact coordinates without exposing secret values.

Guardrails

  • Treat repository activation, secret management and trusted-build changes as operator-controlled actions.
  • Build and log queries are read-only. Writes must respect the configured role and the target platform's access controls.
  • Use public placeholders in examples. Private registry addresses, hostnames, user names, repository names and release evidence never enter the public projection.

Signals

GitHub stars
22
Forks
2
Last commit
Aug 2026
Advanced
Catalog kind
skill
Gateway key
infra-woodpecker-pipeline-ops
Source
github.com/seed-forge/harness-ai-kit