ihatedevops

A skill for Claude Code that quietly injects 10 atomic DevOps best practices into every session. Ask for a Dockerfile, get secure Chainguard images, multi-stage builds, and a non-root user — without asking. Ask for a CI pipeline, get SHA-pinned actions and least-privilege tokens. That kind of thing.

Star on GitHub

➜ ~/dev ./install.sh # pick your comfort level

claude plugin marketplace add zenconnor/ihatedevops && claude plugin install ihatedevops@ihatedevops

the official plugin — gets updates. already inside a claude session? same thing: /plugin marketplace add zenconnor/ihatedevops, then /plugin install ihatedevops@ihatedevops.

➜ ~/dev ls practices/

Chainguard base images by default — cgr.dev/chainguard/*, free, ~0 CVEs
Multi-stage builds, non-root user — build tools never ship
Pin everything — lockfiles, image digests, actions by commit SHA
Least-privilege CI tokens — explicit permissions: contents: read
No secrets in code, images, or logs — OIDC over long-lived keys
Health checks + rollback-ready deploys — /healthz, one-step revert
Plan before apply — read the diff; never hand-edit live infra
Structured logs with levels — JSON events, not print("here 2")
Fail fast, cache hard in CI — lint before build before test
Small, frequent, reversible releases — boring deploys are the goal

➜ ~/dev open github.com/zenconnor/ihatedevops # source, issues, PRs

➜ ~/dev