deployment-compliance-check Skill
Checks whether Azure Container App deployments comply with the organization's CI/CD-only deployment policy. Uses three signals: Activity Log caller identity, Docker image labels (tamper-proof), and resource tags. QueryLogAnalyticsByWorkspaceId Published by microsoft in sre-agent.
What is deployment-compliance-check Skill?
Checks whether Azure Container App deployments comply with the organization's CI/CD-only deployment policy. Uses three signals: Activity Log caller identity, Docker image labels (tamper-proof), and resource tags. QueryLogAnalyticsByWorkspaceId Published by microsoft in sre-agent. This profile combines repository metadata with install, compatibility, and usage signals so developers can quickly decide whether it fits their agent workflow before opening the source repository.
Automated repository signals based on public metadata such as recency, license, installation evidence, and adoption. These are not a security audit or endorsement.
Key capabilities
- Includes SKILL.md support
- Reusable instructions support
- Deployment
- Data analysis
- Design and media
- Deployment use cases
- Data analysis use cases
Technical details
- Install or run with Copy skill directory
When to use deployment-compliance-check Skill
- Use it for deployment.
- Use it for data analysis.
- Use it for design and media.
Built with
Editorial notes
Source
- Creator: microsoft
- Repository: microsoft/sre-agent
- Skill file: labs/deployment-compliance/skills/deployment-compliance-check/SKILL.md
What it does
Checks whether Azure Container App deployments comply with the organization's CI/CD-only deployment policy. Uses three signals: Activity Log caller identity, Docker image labels (tamper-proof), and resource tags. QueryLogAnalyticsByWorkspaceId
Skill instructions
<!-- Add your skill instructions here -- Organization Policy All Container App deployments MUST go through the approved CI/CD pipeline (GitHub Actions). Deployments via Azure Portal, interactive Azure CLI, or PowerShell are non-compliant. Only service principal / managed identity deployments from the CI/CD pipeline are compliant. Non-compliant deployments should be flagged, reported, and reverted (with user approval). This policy ensures every production change is traceable to a code commit, reviewed via PR, and auditable through the pipeline. How the Pipeline Works GitHub Actions builds the Docker image with immutable compliance labels, pushes to ACR, which fires an Event Grid event. An Automation Runbook (running under a managed identity) picks up the event and updates the Container App via ARM. The key point: GitHub never authenticates to Azure AD directly — all Azure-side auth happens through managed identities inside Azure. Data Sources Activity Logs in Log Analytics Activity LogsExplore related resources
Frequently asked questions
What is deployment-compliance-check?
deployment-compliance-check is a open-source AI agent skill with Copy skill directory. Checks whether Azure Container App deployments comply with the organization's CI/CD-only deployment policy.
Who is deployment-compliance-check best for?
deployment-compliance-check is best for reusing agent instructions, scripts, and references, deployment workflows, data analysis workflows, design and media workflows.
How do I install deployment-compliance-check?
Install or run deployment-compliance-check using Copy skill directory. Check deployment-compliance-check for the latest setup command.
Is deployment-compliance-check actively maintained?
deployment-compliance-check may need a closer maintenance check before production use.
Auto-fetched from GitHub.
