deployment-compliance-check Skill
Checks whether Azure Container App deployments comply with the organization's CI/CD-only deployment policy. Uses three signals: Activity Log caller identity, Docker image labels (tamper-proof), and resource tags. QueryLogAnalyticsByWorkspaceId Published by microsoft in sre-agent.
Decision snapshot
Is this a fit?
Deployment, Data analysis, Design and media, Includes SKILL.md
Compatibility not yet detected.
Permission behavior not yet detected.
Copy skill directory
2 months ago · MIT license
No specific cautions were detected. Review the source and requested permissions before installing.
What is deployment-compliance-check Skill?
Checks whether Azure Container App deployments comply with the organization's CI/CD-only deployment policy. Uses three signals: Activity Log caller identity, Docker image labels (tamper-proof), and resource tags. QueryLogAnalyticsByWorkspaceId Published by microsoft in sre-agent. This profile combines repository metadata with install, compatibility, and usage signals so developers can quickly decide whether it fits their agent workflow before opening the source repository.
Automated repository signals based on public metadata such as recency, license, installation evidence, and adoption. These are not a security audit or endorsement. See how SkillIndex evaluates profiles.
Key capabilities
- Includes SKILL.md support
- Reusable instructions support
- Deployment
- Data analysis
- Design and media
- Deployment use cases
- Data analysis use cases
Declared skill metadata
- Source file: labs/deployment-compliance/skills/deployment-compliance-check/SKILL.md
These fields retain source and confidence evidence from the indexed SKILL.md.
Compatibility and setup
- Install or run with Copy skill directory
When to use deployment-compliance-check Skill
- Use it for deployment.
- Use it for data analysis.
- Use it for design and media.
Built with
Editorial notes
Source
- Creator: microsoft
- Repository: microsoft/sre-agent
- Skill file: labs/deployment-compliance/skills/deployment-compliance-check/SKILL.md
What it does
Checks whether Azure Container App deployments comply with the organization's CI/CD-only deployment policy. Uses three signals: Activity Log caller identity, Docker image labels (tamper-proof), and resource tags. QueryLogAnalyticsByWorkspaceId
Skill instructions
<!-- Add your skill instructions here -- Organization Policy All Container App deployments MUST go through the approved CI/CD pipeline (GitHub Actions). Deployments via Azure Portal, interactive Azure CLI, or PowerShell are non-compliant. Only service principal / managed identity deployments from the CI/CD pipeline are compliant. Non-compliant deployments should be flagged, reported, and reverted (with user approval). This policy ensures every production change is traceable to a code commit, reviewed via PR, and auditable through the pipeline. How the Pipeline Works GitHub Actions builds the Docker image with immutable compliance labels, pushes to ACR, which fires an Event Grid event. An Automation Runbook (running under a managed identity) picks up the event and updates the Container App via ARM. The key point: GitHub never authenticates to Azure AD directly — all Azure-side auth happens through managed identities inside Azure. Data Sources Activity Logs in Log Analytics Activity LogsVerified compatibility and discovery
Frequently asked questions
What is deployment-compliance-check?
deployment-compliance-check is a open-source AI agent skill with Copy skill directory. Checks whether Azure Container App deployments comply with the organization's CI/CD-only deployment policy.
Who is deployment-compliance-check best for?
deployment-compliance-check is best for reusing agent instructions, scripts, and references, deployment workflows, data analysis workflows, design and media workflows.
How do I install deployment-compliance-check?
Install or run deployment-compliance-check using Copy skill directory. Check deployment-compliance-check for the latest setup command.
Is deployment-compliance-check actively maintained?
deployment-compliance-check may need a closer maintenance check before production use.
Project health auto-fetched from the source repository.
Maintain this resource?
Review this source-backed profile, send a correction with evidence, or link to it from your documentation. Claims verify your relationship to the project; profile facts still require source evidence and editorial review.
