Ecosystem & Runtimes

Supported Ecosystem & Stacks

`@waiyat/devops` works natively with your existing languages, tools, package managers, and cloud registries.

Official Workflow

Direct integration with GitHub Actions using reusable workflows (`uses: Waiyat/devops/.github/workflows/reusable-ci.yml@main`).

Configuration Snippet

jobs:
  ci:
    uses: Waiyat/devops/.github/workflows/reusable-ci.yml@main
    with:
      node-version: '22'
      package-manager: 'pnpm'

Container CD

Automated Dockerfile audit for non-root execution, multi-stage caching, and automated GHCR publishing via `reusable-cd-docker.yml`.

Configuration Snippet

# Audit Dockerfile for non-root USER and .dockerignore
npx @waiyat/devops@latest docker check --fix

Languages

Full automated detection and preflight support for TypeScript, JavaScript, Python, Go, Rust, Java, PHP, Ruby, and C#.

Configuration Snippet

# Automatically detects runtime and applies rules
npx @waiyat/devops@latest check

Package Managers

Deterministic lockfile and dependency resolution for npm, pnpm, yarn, bun, uv, poetry, pip, cargo, maven, and gradle.

Configuration Snippet

# Preflight checks lockfile parity (pnpm-lock.yaml / yarn.lock / bun.lockb)
npx @waiyat/devops@latest check

DevSecOps

Seamlessly incorporated into the `reusable-security.yml` workflow for automated CVE checking and token leak detection.

Configuration Snippet

jobs:
  security:
    uses: Waiyat/devops/.github/workflows/reusable-security.yml@main