From Harness DevOps
Azure DevOps Pipelines conventions — Workload Identity Federation over SPN-with-secret, 40-char SHA-pinned cross-repo template refs, and the ado-agent-in-ci-guard rule forbidding write-scoped tokens in agent-invoking pipelines. Use when authoring Azure Pipelines YAML.
How this skill is triggered — by the user, by Claude, or both
Slash command
/harness-devops:addon-azure-devopsThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
- Workload Identity Federation is GA and on by default for new service
template:) that resolve to another repository must
pin ref: to a 40-char commit SHA.ado-agent-in-ci-guard hook enforces the same agent-in-CI rule as
the GitHub variant: workflows invoking coding agents may not introduce
write-scoped tokens (e.g. persistCredentials: true).npx claudepluginhub camilool8/harness-engineering-templates --plugin harness-devopsGuides completion of development work by verifying tests, detecting environment, and presenting structured options for merge, PR, or cleanup.
Enforces test-driven development: write failing test first, then minimal code to pass. Use when implementing features or bugfixes.
Guides creation and editing of skills using test-driven development with pressure scenarios and subagents to verify agent compliance.