Core Capabilities & Architecture

Everything You Need to Standardize CI/CD

`@waiyat/devops` consolidates pre-flight diagnostics, workflow scaffolding, and centralized reusable GitHub Actions into a zero-config CLI.

Detector

Identifies languages, frameworks, and package managers.

▸

Project IR

Normalized domain model of your repository.

▸

Diagnostics

6-category preflight checks with scoring.

▸

Scoring Layer

Weighted 0-100 health score computation.

▸

Scaffolding & Auto-Fix

Injects CI workflows and heals misconfigurations.

Pre-Flight CI/CD Diagnostics

Instant inspection of package manifests, Git state, package managers, and container setups.

npx @waiyat/devops@latest check

Evaluates your repository before commits or CI deployments. Inspects package.json health, Git version control initialization, package manager detection (npm, pnpm, yarn, bun), TypeScript compiler options, and Dockerfile presence.

Key Capabilities:

Package manifest inspection and auto-detection of active package manager

Git repository tracking and version control verification

TypeScript tsconfig.json configuration probe

Dockerfile presence and container configuration inspection

CLI Output Preview

Terminal Output

🔍 Running DevOps Pre-Flight Diagnostics...

✅ [INFO] Package manifest detected (package.json found).
✅ [INFO] Git version control initialized.
✅ [INFO] Package Manager: pnpm detected.
✅ [INFO] TypeScript Configured: tsconfig.json present.
✅ [INFO] Dockerfile Present: Multi-stage build configured.

----------------------------------------
Status: 🟢 All Pre-Flight Quality Checks Passed!

Weighted Health Score & Scoring Layer

Deterministic 0-100 health scoring across quality, CI/CD, security, container, and observability dimensions.

npx @waiyat/devops@latest check --json

Computes a weighted repository health score using the v3 dedicated Scoring layer. Evaluates category-level scores and aggregates into an overall 0-100 score with granular per-check pass/fail/warn breakdowns, ideal for CI quality gates and PR dashboards.

Key Capabilities:

Weighted 0-100 overall health score computation

Category-level scores: Quality, CI/CD, DevSecOps, Docker, Environment, Observability

Machine-readable JSON output for CI pipelines and PR bots

Detailed per-check pass/fail/warn diagnostics with actionable remediation hints

CLI Output Preview

Terminal Output

📊 Repository Health Score: 74/100 [NEEDS ATTENTION]

[QUALITY & RUNTIME] (Score: 85/100)
  ✓ Deterministic Lockfile: pnpm-lock.yaml found
  ✓ TypeScript Compiler Options: tsconfig.json configured

[CI/CD AUTOMATION] (Score: 60/100)
  ✗ CI Quality Gate Workflow: No active CI pipeline configured

[DEVSECOPS & SECRETS] (Score: 70/100)
  ✗ .gitignore Security Protection: .env exclusion missing

[CONTAINERS & DOCKER] (Score: 65/100)
  ✗ .dockerignore File Present: Missing
  ✗ Container Least Privilege: Runs as root

----------------------------------------------------
Recommended Action:
   Run npx @waiyat/devops@latest fix to automatically heal safe issues.

Intelligent Workflow Scaffolding

Scaffold hardened GitHub Actions pipelines in one command.

npx @waiyat/devops@latest init --template nextjs

Generates tailored `.github/workflows/ci.yml` files configured with your package manager, target Node.js version, and reusable quality gates. Supports Next.js, standard Node.js, Docker, monorepos, and full enterprise stacks.

Key Capabilities:

Templates: nextjs, node, docker, monorepo, full, pro

Automatic package manager resolution (pnpm, npm, yarn, bun)

Configurable target Node.js version (--node 22)

Preview YAML before writing to disk using `--dry-run`

CLI Output Preview

Terminal Output

🚀 @waiyat/devops CLI - Centralized DevOps & CI/CD Automation Engine

⚙️  Detecting project environment...
   ✔ Framework: Next.js (App Router)
   ✔ Package Manager: pnpm
   ✔ Node.js Target: v22

📝 Generating .github/workflows/ci.yml using template 'nextjs'...
   ✔ Injected uses: Waiyat/devops/.github/workflows/reusable-ci.yml@main

✨ Successfully created .github/workflows/ci.yml

Enterprise Reusable Workflows

Call centralized, production-grade workflows directly from Waiyat/devops.

npx @waiyat/devops@latest list

Eliminates the need to maintain hundreds of lines of complex workflow YAML across repositories. Reference centralized workflows maintained in `Waiyat/devops` directly via GitHub Actions `uses:` syntax.

Key Capabilities:

`reusable-ci.yml`: Multi-runtime quality gate (typecheck, linting, build, test, audit, coverage)

`reusable-cd-docker.yml`: Multi-arch Docker buildx (amd64/arm64) & GHCR / DockerHub publishing

`reusable-release.yml`: Conventional commits, automated changelogs, and GitHub releases

`reusable-security.yml`: Aqua Security Trivy SAST & GitLeaks secret scanner

CLI Output Preview

Terminal Output

📦 Available Enterprise Reusable Workflows in Waiyat/devops:

  1. Reusable CI Quality Gate:
     uses: Waiyat/devops/.github/workflows/reusable-ci.yml@main

  2. Reusable Docker Container CD:
     uses: Waiyat/devops/.github/workflows/reusable-cd-docker.yml@main

  3. Reusable Semantic Release:
     uses: Waiyat/devops/.github/workflows/reusable-release.yml@main

  4. Reusable DevSecOps & Vulnerability Scan:
     uses: Waiyat/devops/.github/workflows/reusable-security.yml@main

Multi-Arch Container Deployment

Inspect or generate a non-root Dockerfile for the detected project runtime.

npx @waiyat/devops docker init --dry-run

Inspects existing Docker configuration or generates a multi-stage, non-root Dockerfile when the repository does not already have one. The dry-run option previews it without writing files.

Key Capabilities:

Generates a multi-stage Dockerfile for the detected runtime

Uses a non-root user in the generated Dockerfile

Refuses to overwrite an existing Dockerfile without `--force`

Supports `--dry-run` and `--json` output modes

CLI Output Preview

Terminal Output

--- [DRY RUN] Dockerfile that would be created ---
FROM node:22-alpine AS base
WORKDIR /app
COPY package*.json ./
RUN npm ci --only=production
USER node
--- End of Dry Run ---

Ready to scaffold CI/CD in your repository?

Explore all CLI options, templates, and flags in the Commands guide.

View CLI Commands