Pin Upstream Images

Name: Pin Upstream Images
Rating: 91 (1 reviews)
Author: multigres

Trust Score 91/100

Automatically pin multigres-related container image SHA tags in image_defaults.go, compare upstream code between old and new SHAs, and surface any operator impa

triggers:pin image tagsprepare images for releaseupgrade multigres imagespin upstream imagesfetch latest sha tags

GitHub SKILL.md

What it does

This skill automates pinning container image SHA tags used by the multigres operator (multigres, pgctld, multiadmin-web). It fetches latest SHA tags, updates api/v1alpha1/image_defaults.go, and performs an upstream code comparison to identify commits that might affect operator compatibility. The workflow includes fetching SHAs, updating image_defaults.go, running git diffs between old and new SHAs, and producing an evidence-backed impact analysis.

When to use it

Use this skill when preparing an operator release or bumping image tags: e.g., "prepare images for release", "pin image tags", or "upgrade multigres images". Run it before publishing a release so you can audit breaking changes, flag required operator updates, and generate a precise commit message.

What's included

Scripts: fetch_latest_tags.py (has_scripts=true)
References: none listed
Instructions: step-by-step guidance to fetch SHAs, update image_defaults.go, clone upstream monorepo for diffs, filter non-binary changes, and run flag/env audits against operator containers. The skill prescribes per-container checks for flags and environment variables and a final smoke test flow.

Compatible agents

Compatible with command-line-capable agents and CI automation that can run Python and git (e.g., Codex/GitHub runner, CLI-based agents).

Audit Summary

Skill automates pinning multigres container image SHA tags for Kubernetes operator releases, including upstream code comparison and compatibility audits. The bundled fetch script ran successfully, resolving latest SHA tags from GHCR. SKILL.md is exceptionally thorough with 6 detailed workflow steps covering tag fetching, code diffs, flag/env var compatibility audits, and deployment smoke tests.

Watch Out

Clones multigres repo to /tmp/multigres which may be large
Requires kubectl and kind cluster for smoke test step
Workflow is very long — agent may truncate or skip steps

Notes

Well-crafted DevOps skill for a specific ecosystem. Script uses only stdlib (urllib.request, concurrent.futures), no external deps. All network calls to legitimate public endpoints (ghcr.io, github.com). No security concerns. SKILL.md is unusually comprehensive — almost too long for a single skill, but well-structured with clear steps and mandatory audit checks.

Information

Repository: Multigres Operator
Stars: 241

Trust Score

Overall91

Security96

Code Quality88

Architecture82

Usefulness52

Related Skills

NGINX Integration

Integrate with NGINX via the Membrane CLI to query, manage, and proxy requests to NGINX for configuration, logs, and runtime operations.

Starlark Dev

Create, debug, and test Kurtosis Starlark packages — write package structure, run dry-runs, and inspect plan execution for reliable orchestration.

Sync Production Database to Development

Run a safe, scripted workflow to download production database dumps and restore them into a development environment (download-only and restore options).

Sandbox0 Integration

Guidance and templates for integrating Sandbox0 sandboxing into AI agents — CLI/SDK patterns, templates, volumes, network policy, and deployment choices.

Alpha Forge Pre-Ship Quality Gates

Pre-merge quality gates for PRs that validate RNG determinism, forked URLs, runtime parameter ranges, and manifest synchronization to reduce review cycles.

OpenTestAI

Automated, high-confidence AI testing: bug detection, persona feedback, and prioritized test-case generation using many specialized tester profiles.

Minimal Run & Audit (repro reporting)

Execute a README-first smoke test and produce standardized reproducibility outputs (`repro_outputs/`) and PATCHES.md — trusted reporting for repo reproduction r

Skill Issue — Skill Auditor

Scan and audit installed agent skills to produce a health report covering inventory, usage, dependency checks, version status, and actionable recommendations.

Back to Skills