From depot
Configures and manages Depot CI, a drop-in replacement for GitHub Actions that runs workflows entirely within Depot. Use when migrating GitHub Actions workflows to Depot CI, running `depot ci migrate`, managing Depot CI secrets and variables, running workflows with `depot ci run`, debugging Depot CI runs with `depot ci run list`, `depot ci status`, `depot ci logs`, or `depot ci ssh`, checking workflow compatibility, or understanding Depot CI capabilities. Also use when the user mentions .depot/ directory, depot ci commands, or asks about running GitHub Actions workflows on Depot's infrastructure without GitHub-hosted runners.
npx claudepluginhub depot/skills --plugin depotThis skill uses the workspace's default tool permissions.
Depot CI is a programmable CI system for engineers and agents. Workflows in Depot CI run entirely on Depot compute with built-in job visibility, debuggability, and control. GitHub Actions is the first syntax Depot CI supports: migrate your existing GitHub Actions workflows, and get fast, reliable runs on optimized infrastructure.
Implements Playwright E2E testing patterns: Page Object Model, test organization, configuration, reporters, artifacts, and CI/CD integration for stable suites.
Guides Next.js 16+ Turbopack for faster dev via incremental bundling, FS caching, and HMR; covers webpack comparison, bundle analysis, and production builds.
Discovers and evaluates Laravel packages via LaraPlugins.io MCP. Searches by keyword/feature, filters by health score, Laravel/PHP compatibility; fetches details, metrics, and version history.
Depot CI is a programmable CI system for engineers and agents. Workflows in Depot CI run entirely on Depot compute with built-in job visibility, debuggability, and control. GitHub Actions is the first syntax Depot CI supports: migrate your existing GitHub Actions workflows, and get fast, reliable runs on optimized infrastructure.
Three subsystems: compute (provisions and executes work), orchestrator (schedules multi-step workflows, handles dependencies), GitHub Actions parser (translates Actions YAML into orchestrator workflows). The system is fully programmable.
If a user belongs to multiple organizations, before setup/migration or if CI commands can't find expected workflows, verify Depot org context first:
# Check current org ID
depot org show
# List orgs the user belongs to
depot org list
# Option A: switch default org for this shell/session
depot org switch <org-id>
# Option B: keep current org and target explicitly per command
depot ci run --org <org-id> --workflow .depot/workflows/ci.yml
Use --org <org-id> when the workflow/repo lives in a different org than the current default.
Depot dashboard → Settings → GitHub Code Access → Connect to GitHub
(If you've used Claude Code on Depot, this may already be installed.)
depot ci migrate
This interactive wizard:
.github/workflows/ and analyzes each for Depot CI compatibility..depot/workflows/ with inline corrections and comments..github/actions/ to .depot/actions/.Your .github/ directory is untouched, so workflows run in both GitHub and Depot simultaneously.
Warning: Workflows that cause side effects (deploys, artifact updates) will execute twice.
The migrate command can also be run as individual steps:
# Check installation and auth
depot ci migrate preflight
# Copy and transform workflows to .depot/workflows/
depot ci migrate workflows
# Import GitHub Actions secrets and variables into Depot CI
depot ci migrate secrets-and-vars
| Flag | Description |
|---|---|
-y, --yes | Non-interactive, migrate all workflows |
--overwrite | Overwrite existing .depot/ directory |
--org <id> | Organization ID (required if multiple orgs) |
--token <token> | Depot API token |
depot ci migrate secrets-and-vars
This creates and runs a one-shot GitHub Actions workflow on a temporary branch that reads your existing secrets and variables and imports them into Depot CI. The branch is safe to delete afterwards.
You can also add secrets and variables manually with depot ci secrets add and depot ci vars add (see below).
| Flag | Description |
|---|---|
-y, --yes | Skip preview and confirmation prompts |
--branch | Override the branch name used for the migration workflow |
--secrets <name> | Secret name to include; can be repeated to select multiple. Omit to include all. |
--vars <name> | Variable name to include; can be repeated to select multiple. Omit to include all. |
--org <id> | Organization ID (required if multiple orgs) |
--token <token> | Depot API token |
Create .depot/workflows/ and .depot/actions/ directories manually. Copy workflow files from .github/workflows/. Configure secrets via the CLI.
Secrets can be org-wide or scoped to a specific repository. Repository-scoped secrets override org-wide secrets with the same name.
# Add (prompts for value securely if --value omitted)
depot ci secrets add SECRET_NAME
depot ci secrets add SECRET_NAME --value "$NPM_TOKEN" --description "NPM auth token"
# Add repo-scoped secret
depot ci secrets add SECRET_NAME --repo owner/repo --value "$NPM_TOKEN"
# List (names and metadata only, no values)
depot ci secrets list
depot ci secrets list --output json
depot ci secrets list --repo owner/repo # Also show repo-specific secrets
# Remove
depot ci secrets remove SECRET_NAME
depot ci secrets remove SECRET_NAME --force # Skip confirmation
depot ci secrets remove SECRET_NAME --repo owner/repo # Remove repo-scoped secret
Treat credentials as sensitive input and never echo them back in outputs.
--value "$NPM_TOKEN"), not literals.depot ci secrets add SECRET_NAME) over command-line secret values.DEPOT_TOKEN and other credentials; pass at runtime only.Non-secret config values accessible as ${{ vars.VARIABLE_NAME }}. Unlike secrets, values can be read back. Variables can be org-wide or scoped to a specific repository, just like secrets.
# Add org-wide variable
depot ci vars add VAR_NAME --value "some-value"
# Add repo-scoped variable
depot ci vars add VAR_NAME --value "some-value" --repo owner/repo
# List
depot ci vars list
depot ci vars list --output json
depot ci vars list --repo owner/repo # Also show repo-specific variables
# Remove
depot ci vars remove VAR_NAME
depot ci vars remove VAR_NAME --force
depot ci vars remove VAR_NAME --repo owner/repo
# Run a workflow
depot ci run --workflow .depot/workflows/ci.yml
# Run a workflow in a specific org (for multi-org users)
depot ci run --org <org-id> --workflow .depot/workflows/ci.yml
# Run specific jobs only
depot ci run --workflow .depot/workflows/ci.yml --job build --job test
# Run a job and connect via SSH
depot ci run --workflow .depot/workflows/ci.yml --job build --ssh
# Debug with tmate session after step N (requires single --job)
depot ci run --workflow .depot/workflows/ci.yml --job build --ssh-after-step 3
The CLI auto-detects uncommitted changes vs. the default branch, uploads a patch to Depot Cache, and injects a step to apply it after checkout, so your local working state runs without needing a push.
Use --ssh or --ssh-after-step on depot ci run to start a debug session when launching a new run. Use depot ci ssh (below) to connect to an already-running job.
Build a custom image once and reuse it across jobs to skip repeated setup steps.
Use depot/snapshot-action (Depot CI only, not compatible with GitHub Actions):
jobs:
build-image:
runs-on: depot-ubuntu-latest
steps:
- run: sudo apt-get install -y your-tool
- uses: depot/snapshot-action@v1
with:
image: <org-id>.registry.depot.dev/my-ci-image:latest
Reference it in any Depot CI job with the runs-on object syntax:
jobs:
test:
runs-on:
size: 2x8
image: <org-id>.registry.depot.dev/my-ci-image:latest
steps:
- uses: actions/checkout@v4
Available sizes: 2x8, 4x16, 8x32, 16x64, 32x128 (CPUs x RAM in GB).
Constraints: Images get pushed to and must be pulled from the Depot registry (registry.depot.dev), external registries are not supported.
Depot CI supports running steps concurrently within a single job using parallel: blocks. This reduces job duration to the slowest branch rather than the sum of all steps. This is a Depot CI-specific feature, it is not compatible with GitHub Actions runners.
Use parallel: inside steps: with individual steps or sequential: groups. Each branch starts from the same job state; step outputs, environment variable and $GITHUB_PATH changes from all branches are merged back when the block completes.
# Run lint, typecheck, and tests concurrently
steps:
- uses: actions/checkout@v4
- name: Install dependencies
run: pnpm install
- parallel:
- name: Lint
run: pnpm lint
- name: Typecheck
run: pnpm type-check
- name: Test
run: pnpm test
Use sequential: inside parallel: to group steps that must run in order within one branch:
- parallel:
- sequential:
- name: Build
run: npm run build
- name: Test
run: npm test
- name: Lint
run: npm run lint
Control failure behavior with fail-fast:. Defaults to true which cancels remaining steps in a parallel block. false will instead let all steps in the parallel block run to completion:
- fail-fast: false
parallel:
- name: Lint
run: pnpm lint
- name: Typecheck
run: pnpm type-check
Limitations:
parallel: cannot be nested inside another parallel: (use sequential: inside parallel: instead)id values must be unique across the entire job (including even in different parallel blocks)Connect to a running CI job via interactive terminal for debugging.
# Connect directly using a job ID
depot ci ssh <job-id>
# Connect to a specific job in a run
depot ci ssh <run-id> --job build
# Auto-select job when there's only one
depot ci ssh <run-id>
# Print SSH connection details for automation
depot ci ssh <run-id> --info --output json
The command waits up to 5 minutes for the job sandbox to be provisioned if it hasn't started yet.
| Flag | Description |
|---|---|
--job <key> | Job key to connect to (required for multi-job runs) |
--info | Print SSH details instead of connecting interactively |
-o, --output | Output format for --info (json) |
--org <id> | Organization ID |
--token <token> | Depot API token |
# Check run status (shows workflows -> jobs -> attempts hierarchy)
depot ci status <run-id>
# Fetch logs (accepts run ID, job ID, or attempt ID)
depot ci logs <run-id>
depot ci logs <attempt-id>
# Specify a job when the run has multiple jobs
depot ci logs <run-id> --job test
# Disambiguate when multiple workflows share the same job key
depot ci logs <run-id> --job build --workflow ci.yml
When given a run or job ID, depot ci logs resolves to the latest attempt automatically.
| Flag | Description |
|---|---|
--job <key> | Job key to select (required when run has multiple jobs) |
--workflow <path> | Workflow path to filter jobs (for example, ci.yml) |
--org <id> | Organization ID |
--token <token> | Depot API token |
depot ci run list is the primary entrypoint for debugging active/recent CI activity across workflows.
# List runs (defaults to queued + running)
depot ci run list
# Filter by status (repeatable)
depot ci run list --status failed
depot ci run list --status finished --status failed
# Limit number of results
depot ci run list -n 5
# Machine-readable output for tooling/agents
depot ci run list --output json
run list flags| Flag | Description |
|---|---|
-n <int> | Number of runs to return (default 50) |
--status <name> | Filter by status; repeatable: queued, running, finished, failed, cancelled |
-o, --output | Output format (json) |
--org <id> | Organization ID |
--token <token> | Depot API token |
# Find failed runs
depot ci run list --status failed -n 10
# Pull logs directly (auto-selects job if only one)
depot ci logs <run-id>
# Specify job when there are multiple
depot ci logs <run-id> --job build
# Use status to inspect the full workflow/job/attempt hierarchy when needed
depot ci status <run-id>
Use --output json on depot ci run list for machine-readable output.
name, run-name, on, env, concurrency, defaults, jobs, on.workflow_call (with inputs, outputs, secrets)
push (branches, tags, paths), pull_request (branches, paths), pull_request_target, schedule, workflow_call, workflow_dispatch (with inputs), workflow_run, merge_group
name, needs, if, outputs, env, defaults, timeout-minutes, concurrency, strategy (matrix, fail-fast, max-parallel), continue-on-error, container, services, uses (reusable workflows), with, secrets, secrets.inherit, steps
id, name, if, uses, run, shell, with, env, working-directory, continue-on-error, timeout-minutes
actions, checks, contents, id-token, metadata, pull_requests, statuses, workflows
github, env, vars, secrets, needs, strategy, matrix, steps, job, runner, inputs contexts. Functions: always(), success(), failure(), cancelled(), contains(), startsWith(), endsWith(), format(), join(), toJSON(), fromJSON(), hashFiles()
JavaScript (Node 12/16/20/24), Composite, Docker
uses referencing workflows in other repositories is not supported. Local reusable workflows work.pull_request and pull_request_target from forks not supported yetdepot-ubuntu-latest (no error, runs on Ubuntu)environment field is not supportedrelease, issues, issue_comment, deployment, create, delete, and othersDepot CI supports these runner labels:
| Label | CPUs | RAM |
|---|---|---|
depot-ubuntu-latest | 2 | 8 GB |
depot-ubuntu-24.04 | 2 | 8 GB |
depot-ubuntu-24.04-4 | 4 | 16 GB |
depot-ubuntu-24.04-8 | 8 | 32 GB |
depot-ubuntu-24.04-16 | 16 | 64 GB |
depot-ubuntu-24.04-32 | 32 | 128 GB |
Any label Depot CI can't parse is silently treated as depot-ubuntu-latest.
your-repo/
├── .github/
│ ├── workflows/ # Original GHA workflows (keep running)
│ └── actions/ # Local composite actions
├── .depot/
│ ├── workflows/ # Depot CI copies of workflows
│ └── actions/ # Depot CI copies of local actions
| Mistake | Fix |
|---|---|
Removing .github/workflows/ after migration | Keep them during transition to verify Depot CI parity |
| Using cross-repo reusable workflows | Not supported yet, inline the workflow or copy it locally |
Setting secrets without --repo when needed | Use --repo owner/repo for repo-specific secret overrides |
| Running in the wrong org context | Check depot org show, list with depot org list, then switch org or pass --org <id> |
Forgetting --org flag with multiple orgs | Migration or run commands may miss the expected repo/workflow; specify --org <id> |
Workflows with runs-on: windows-latest | Treated as depot-ubuntu-latest, may fail |