DevOps Automation
from a single command.
Pre-flight diagnostics · Auto-repair · Security scanning · CycloneDX SBOM · Reusable GitHub Actions workflows. Zero configuration required.
Everything your pipeline needs,
in one command.
No stitching fragile bash scripts. Ship faster with automated quality gates and intelligent auto-repair.
Universal Preflight Check
Multi-category diagnostics covering Quality & Runtime, CI/CD, DevSecOps, Docker, and Environment parity.
Self-Healing Auto-Repair
Automatically generates missing CI workflows, adds .dockerignore, injects non-root USER, and protects .env files.
DevSecOps & Secrets Scan
Deep scans for unencrypted API tokens, certificates, and Aqua Trivy / GitLeaks vulnerability findings.
Enterprise Reusable Workflows
Call centralized, battle-tested GitHub Actions workflows using `uses: Waiyat/devops/...@main`.
Docker & Container Audit
Audits Dockerfiles for multi-stage build efficiency, layer caching, least-privilege execution, and healthchecks.
CycloneDX SBOM Generation
Generates real Software Bill of Materials in CycloneDX v1.5 JSON with package purl cryptographic signatures.
Automatic Stack Detection
Detects languages, frameworks, and package managers automatically from your repository structure.
Languages
TypeScript, JavaScript, Python, Go, Rust, Java, PHP, Ruby, C#
Frameworks
Next.js, React, Vue, Svelte, Express, FastAPI, Django, Gin, Actix
Package Managers
npm, pnpm, yarn, bun, uv, poetry, pip, cargo, maven
Containers & Infra
Dockerfile, Docker Compose, Kubernetes, Helm, Terraform
Monorepos
Turborepo, Nx, pnpm workspaces, npm workspaces, Yarn workspaces
Repository Preflight Health Calculator
Toggle real diagnostic checks to see how npx @waiyat/devops check evaluates your repository.
Production & CI/CD Ready
Validates package.json exists with valid name, version, and dependency definitions.
Verifies git version control is initialized (.git) and tracking working tree files.
Checks for presence of pnpm-lock.yaml, package-lock.json, yarn.lock, or bun.lockb.
Confirms tsconfig.json compiler options are configured for static type analysis.
Checks for production Dockerfile for containerization and automated container CI/CD.
Verifies active .github/workflows/ci.yml calling reusable quality gates.
Enterprise CI/CD in 2 lines of YAML.
No complex YAML sprawl across every repository. Reference centralized workflows maintained in Waiyat/devops directly.
reusable-ci.yml: Multi-runtime quality gate (lint, test, build, audit, coverage)reusable-cd-docker.yml: Multi-arch Docker buildx & GHCR/DockerHub deploymentreusable-security.yml: Aqua Trivy SAST scanner & GitLeaks secrets detector# .github/workflows/ci.yml
name: CI Quality Gate
on:
push:
branches: [main]
pull_request:
branches: [main]
jobs:
ci:
uses: Waiyat/devops/.github/workflows/reusable-ci.yml@main
with:
node-version: '22'
package-manager: 'pnpm'
run-build: true
run-test: true
run-audit: true
security:
needs: [ci]
uses: Waiyat/devops/.github/workflows/reusable-security.yml@mainStandardize your DevOps pipeline in 30 seconds.
Install `@waiyat/devops` and start running automated preflight checks, auto-repair, and CycloneDX SBOMs today.