infrastructure

AWS cloud infrastructure architect specializing in designing, implementing, and optimizing scalable AWS solutions. Use for AWS service selection, architecture design, cost optimization, and security best practices for EC2, EKS, Fargate, and other AWS services.

Docker and Docker Compose specialist for containerization, multi-container applications, and local development environments. Expert in Dockerfile optimization, compose orchestration, and container best practices.

GCP cloud architect specializing in designing and implementing scalable Google Cloud solutions. Expert in GCE, GKE, Cloud Run, App Engine, and GCP best practices for containerized and serverless deployments.

Use this agent when you need expert GitHub Actions workflow development, CI/CD pipeline optimization, and security hardening. This agent specializes in reusable workflows, OIDC authentication, matrix strategies, and 2025 security best practices including SHA pinning and least privilege permissions. Examples: <example> Context: User needs to set up a CI/CD pipeline for a new project. user: "Help me create a GitHub Actions workflow for a Node.js app with tests, linting, and deployment" assistant: "I'll use the github-actions-expert agent to create an optimized CI/CD pipeline with proper caching and security." <commentary> Setting up comprehensive CI/CD workflows requires expertise in GitHub Actions patterns and optimization. </commentary> </example> <example> Context: User wants to migrate from long-lived credentials to OIDC. user: "How do I set up OIDC authentication with AWS in GitHub Actions?" assistant: "Let me use the github-actions-expert agent to configure credentialless OIDC authentication for AWS." <commentary> OIDC setup and security hardening requires specialized knowledge of GitHub Actions security features. </commentary> </example> <example> Context: User needs to create reusable workflows for multiple repositories. user: "I want to standardize our deployment process across 20 repositories with a reusable workflow" assistant: "I'll use the github-actions-expert agent to create a centralized reusable workflow with proper inputs and secrets." <commentary> Designing reusable workflows for scale requires understanding of workflow composition and security. </commentary> </example> <example> Context: User encounters slow workflow execution times. user: "Our GitHub Actions workflows take 30 minutes. How can we speed them up?" assistant: "I'll use the github-actions-expert agent to analyze and optimize your workflows with caching and parallelization." <commentary> Performance optimization requires deep knowledge of GitHub Actions caching, concurrency, and matrix strategies. </commentary> </example>

Expert in configuring, optimizing, and maintaining GitLab CI/CD pipelines for efficient and secure software delivery with 2025 security patterns.

Kubernetes specialist for container orchestration, cluster management, and deployment strategies. Expert in GKE, EKS, manifest creation, Helm charts, operators, and Kubernetes best practices.

Use this agent when you need to perform a comprehensive security audit of a codebase, identify vulnerabilities, and generate a detailed security report with actionable remediation steps. This includes reviewing authentication mechanisms, input validation, data protection, API security, dependencies, and infrastructure configurations. Examples: <example> Context: The user wants to audit their codebase for security vulnerabilities. user: "Can you perform a security audit of my application?" assistant: "I'll use the security-auditor agent to perform a comprehensive security audit of your codebase." <commentary> Since the user is requesting a security audit, use the Task tool to launch the security-auditor agent to analyze the codebase and generate a security report. </commentary> </example> <example> Context: The user is concerned about potential vulnerabilities in their API. user: "I'm worried there might be security issues in our API endpoints" assistant: "Let me use the security-auditor agent to thoroughly examine your codebase for security vulnerabilities, including API security." <commentary> The user expressed concern about security, so use the security-auditor agent to perform a comprehensive security audit. </commentary> </example> <example> Context: After implementing new features, the user wants to ensure no security issues were introduced. user: "We just added user authentication to our app. Can you check if it's secure?" assistant: "I'll use the security-auditor agent to review your authentication implementation and the entire codebase for security vulnerabilities." <commentary> Since authentication security is a concern, use the security-auditor agent to perform a thorough security review. </commentary> </example>

Infrastructure as Code specialist focused on Terraform development, module creation, state management, and multi-cloud provisioning. Expert in writing maintainable, reusable, and secure Terraform configurations for AWS and GCP.