📋 Copy Blueprint Command { } Inspect JSON API Ground-Truth Source ↗

⚡ 1-Click Agent & Developer Install

Zero Auth · Ready for Grok Bot, Claude Code & Cursor

### 1. Problem & Operational Bottleneck Sign CLI binaries, container images, and npm packages with Cosign/Sigstore provenance attestations in GitHub Actions. Built and battle-tested in production workflows by **@threepointone** (Sunil Pai (@threepointone)). ### 2. Target Architecture & Required Stack - **GitHub MCP** - **Docker MCP** - **Slack MCP** ### 3. Step-by-Step Implementation Blueprint 1. Connect GitHub MCP, Docker MCP, Slack MCP and verify read-only access to the target workspace. 2. Run the discovery query for 'SLSA Level 3 Artifact Signing & Release Provenance Pipeline' to establish baseline metrics and identify anomalies. 3. Generate a structured remediation or execution artifact with full source citations and diffs. 4. Stage any mutating actions behind an explicit human approval gate and verify final state. ### 4. Copy-Paste Agent Execution Prompt ```markdown Execute the 'SLSA Level 3 Artifact Signing & Release Provenance Pipeline' (devops-github-release-binary-signing-and-provenance) blueprint with GitHub MCP, Docker MCP, Slack MCP. Goal: Sign CLI binaries, container images, and npm packages with Cosign/Sigstore provenance attestations in GitHub Actions. First inspect live state in read-only mode, validate all identifiers and metrics, and output a concrete action plan with verification commands before making any changes. ``` ### 5. Verification & Safety Guardrails - **Human-in-the-Loop Gate:** All external communications, production database mutations, and billing actions stage an explicit review diff before execution. - **Deterministic Telemetry:** Every run logs structured JSON output, latency metrics, and source citations so operators can audit every decision.

Tags: #github-mcp#docker-mcp#slack-mcp#blueprint#security-ops

View All 44 Items by @threepointone →

skill · ⚡ 90

Cloudflare Durable Objects Stateful Coordination Playbook

Build strongly consistent, single-threaded coordination actors with Cloudflare Durable Objects, SQLite storage backend, WebSockets hibernation, and alarms.

skill · ⚡ 89

Cloudflare Agents SDK Stateful AI Runtime Playbook

Build, debug, and deploy persistent AI agents on Cloudflare using the `agents` SDK (`Agent` class, `useAgent` client hooks, scheduled tasks, and MCP client

template · ⚡ 89

MCP Expert — Protocol Spec Auditor & Server Security Grader

Audits any MCP server against the official Streamable HTTP & JSON-RPC 2.0 specification, grading schema clarity, error handling, and auth scoping.