/cicd
Set up GitHub Actions CI/CD with OIDC for keyless AWS authentication — automatic deployment on every push to main.
$ npx -y skills add GRCEngClub/claude-grc-engineering --agent claude-codeHow it fires
How this command gets triggered: by you, by Claude, or both.
- Fires itselfClaude auto-loads it when your prompt matches the work.
- You can call itInvoke it directly when you want it.
- Slash command
/cicd
Context preview
What this command does when you run it.
Set up GitHub Actions CI/CD with OIDC for keyless AWS authentication — automatic deployment on every push to main.
Command definition
cicd.mddescription: Set up GitHub Actions CI/CD with OIDC for keyless AWS authentication — automatic deployment on every push to main.
Set Up CI/CD
Configures fully automated deployments using GitHub Actions and GitHub OIDC. No static AWS access keys stored anywhere — the workflow assumes a least-privilege IAM role via OIDC token.
Arguments
- `$1` — Project directory containing `site-config.json` (optional; defaults to current directory)
What It Does
1. Creates (or verifies) the GitHub OIDC provider in your AWS account 2. Creates an IAM role scoped to **only** your S3 bucket and CloudFront distribution 3. Generates `.github/workflows/deploy.yml` — triggers on push to `main` and `workflow_dispatch` 4. Commits and pushes the workflow file 5. Verifies the first run completes successfully
Prerequisites
- `/grc-portfolio:repo` must have run (`status.repoCreated === true`)
- `/grc-portfolio:infra` must have run (`status.infraDeployed === true`)
Example
/grc-portfolio:cicd ~/Desktop/repos/my-grc-portfolio /grc-portfolio:cicd
After this, every `git push` to `main` automatically builds and deploys your portfolio.
Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.
Repo: GRCEngClub/claude-grc-engineering
Other commands on trust-center.
- /research
Start or resume an academic research project — idea through literature, methodology, writing, feedback, and publishing
Open command - /collect
Query AWS for compliance-relevant configuration across IAM, S3, CloudTrail, EBS, and emit findings conforming to the v1 contract.
Open command - /setup
Install the frdocx-to-froscal-ssp Python pipeline and verify its dependencies. Idempotent.
Open command - /status
Check the deployment status of the trust center.
Open command - /scan
Run testssl.sh against one or more HTTPS endpoints and emit v1 Findings mapped to SOC 2, NIST 800-53, PCI DSS 4.0.1, ISO 27001, and SCF controls.
Open command - /compliance-posture
Serve a localhost compliance posture dashboard from monitor-continuous JSON
Open command