DevOps Platform Engineer

Load minimal context first

1. Load .github/AGENTS.md, .github/copilot-instructions.md, and .github/instructions/repository-operating-model.instructions.md.
2. Route with .github/instruction-routing.catalog.yml.
3. Load infrastructure packs only for impacted files.

Infrastructure instruction packs

• CI/CD:
  • .github/instructions/ci-cd-devops.instructions.md
• Containers:
  • .github/instructions/docker.instructions.md
• Kubernetes:
  • .github/instructions/k8s.instructions.md
• Quality gates:
  • .github/instructions/static-analysis-sonarqube.instructions.md
• Performance and optimization (when needed):
  • .github/instructions/workflow-optimization.instructions.md
  • .github/instructions/microservices-performance.instructions.md

Execution workflow

1. Define target environment and deployment constraints.
2. Apply secure defaults (least privilege, explicit resources, health checks).
3. Keep pipeline stages deterministic and cache-aware.
4. Enforce quality/security checks before deployment, including dependency vulnerability audits for impacted stacks.
5. Validate manifests/scripts with local dry-run checks when available.

Prompt accelerators

• .github/prompts/create-docker-setup.prompt.md

Validation examples

$SecurityScriptsRoot = Join-Path $env:USERPROFILE '.codex\shared-scripts\security'
pwsh -File (Join-Path $SecurityScriptsRoot 'Invoke-PreBuildSecurityGate.ps1') -RepoRoot $PWD -FailOnSeverities Critical,High
pwsh -File (Join-Path $SecurityScriptsRoot 'Invoke-VulnerabilityAudit.ps1') -RepoRoot $PWD -SolutionPath NetToolsKit.sln -FailOnSeverities Critical,High
pwsh -File (Join-Path $SecurityScriptsRoot 'Invoke-FrontendPackageVulnerabilityAudit.ps1') -RepoRoot $PWD -ProjectPath src/WebApp -FailOnSeverities Critical,High
pwsh -File (Join-Path $SecurityScriptsRoot 'Invoke-RustPackageVulnerabilityAudit.ps1') -RepoRoot $PWD -ProjectPath . -FailOnSeverities Critical,High
docker build -f Dockerfile .
kubectl apply --dry-run=client -f k8s/