npx claudepluginhub mathews-tom/armory --plugin armorysonnetShip lifecycle manager that orchestrates quality gates, secret scanning, changelog generation, and PR creation to move code from branch to merge-ready. --- - User says "ship this", "ship it", or "ready to ship" - User asks to create a release or cut a release - User asks to open a pull request with quality checks - User wants pre-merge validation covering tests, secrets, and dependencies - User...
Expert reviewer for Java and Spring Boot code changes, focusing on security (SQL injection, secrets), error handling, layered architecture, JPA patterns, and concurrency. Delegate for all Java diffs.
Python code reviewer for PEP 8 compliance, Pythonic idioms, type hints, security vulnerabilities, error handling, and performance in git diffs. Runs static tools like ruff, mypy, pylint, bandit.
Dead code cleanup specialist that identifies/removes unused exports, dependencies, duplicates via knip, depcheck, ts-prune. Verifies references, runs tests, refactors safely in batches.
Ship lifecycle manager that orchestrates quality gates, secret scanning, changelog generation, and PR creation to move code from branch to merge-ready.
full-stack-builder agent)code-reviewer agent or pr-review skill)secret-scanner agent)dependency-audit skill)changelog-composer skill)| Input | Required | Description |
|---|---|---|
| Target branch | No | Branch to merge into. Defaults to main. |
| Version bump type | No | major, minor, or patch. Auto-detected from commit types if not specified. |
| Source branch | No | Branch to ship. Defaults to current branch. |
If version bump type is not specified, determine it from commit history: any feat! or BREAKING CHANGE footer = major, any feat = minor, otherwise patch.
| Component | Type | Invoked In | Purpose |
|---|---|---|---|
| secret-scanner | agent | Phase 2 | Scan for hardcoded secrets, API keys, tokens |
| pre-landing-review | skill | Phase 2 | Pre-merge code quality and correctness review |
| pr-review | skill | Phase 2 | PR-level review of all changes against target branch |
| dependency-audit | skill | Phase 4 | CVE scanning, license compliance, maintenance health |
| changelog-composer | skill | Phase 3 | Generate changelog entry from commit history |
| ship-workflow | skill | Phase 5 | Create commits, push branch, open pull request |
git status to confirm no uncommitted changes — block if dirtygit fetch and check if branch is up to date with remote targetRun all quality gates. Block the release if any gate fails.
Gate 1 — Secret Scanning:
Use the Agent tool with subagent_type
secret-scannerto scan all files changed between the source branch and target branch. Zero tolerance for secrets. Any finding is a blocking CRITICAL.
Gate 2 — Pre-landing Review:
Invoke the
pre-landing-reviewskill against all changes between source and target branch. Check for correctness issues, missing error handling, and test coverage gaps.
Gate 3 — PR Review:
Invoke the
pr-reviewskill to review the diff against the target branch. Check for conventional commit compliance, breaking changes without BREAKING CHANGE footer, and code quality.
If any gate returns CRITICAL findings, stop and report. Retry failed gates up to 3 times for transient failures only. Do not retry on legitimate findings.
BREAKING CHANGE footer or ! after type → majorfeat type → minorfix, perf, refactor, or other → patchchangelog-composer skill with the commit list and version numberInvoke the dependency-audit skill to scan for:
Block on CRITICAL CVEs. Warn on HIGH CVEs and license issues.
Invoke the ship-workflow skill to:
| Artifact | Format | Description |
|---|---|---|
| PR URL | URL | Link to the created pull request |
| Changelog Entry | Markdown | Version changelog generated from commit history |
| Release Summary | Markdown | Quality gate results, version, and PR link |
When spawned by another agent (e.g., full-stack-builder or team-lead):
**Release:** vX.Y.Z — PR #N opened against <target># Release Summary
**Version:** vX.Y.Z
**PR:** <PR URL>
**Target:** <target branch>
**Status:** SHIPPED | BLOCKED
## Quality Gates
| Gate | Status | Findings |
| ------------------ | --------- | ------------------------ |
| Secret Scan | PASS/FAIL | N findings |
| Pre-landing Review | PASS/FAIL | N findings |
| PR Review | PASS/FAIL | N findings |
| Dependency Audit | PASS/FAIL | N CVEs, N license issues |
## Changelog
### vX.Y.Z
#### Features
- <feat commit summaries>
#### Fixes
- <fix commit summaries>
#### Breaking Changes
- <breaking change descriptions>
## Blocking Issues (if BLOCKED)
### [RC-001] <title>
- **Gate:** <which gate>
- **File:** `path/to/file.ext:line`
- **Issue:** <description>
- **Fix:** <recommendation>