ci-audit

# zuvo:ci-audit Audit CI/CD pipelines for wasted time, insecure practices, and reliability gaps. Single-pass execution, no sub-agents needed. **Primary support:** GitHub Actions (full coverage of all 10 dimensions). **Detection-level:** GitLab CI, CircleCI (adapted patterns, unsupported checks scored as N/A). **When to use:** After changing CI workflows, when pipelines are slow, before release hardening, when CI costs are high, quarterly optimization. **When NOT to use:** Application security (`/security-audit`), test quality (`/test-audit`), test runner config (`/tests-performance`). ## Mandatory File Loading Read every file below before starting. Print the checklist. ``` CORE FILES LOADED: 1. ../../shared/includes/codesift-setup.md -- [READ | MISSING -> STOP] 2. ../../shared/includes/env-compat.md -- [READ | MISSING -> STOP] 3. ../../shared/includes/run-logger.md -- [READ | MISSING -> STOP] 4. ../../shared/includes/retrospective.md -- [READ | MISSING -> STOP] ``` If any file is MISSING, STOP. Do not proceed from memory. --- ## Argument Parsing | Token | Behavior | |-------|----------| | _(empty)_ or `full` | All 10 dimensions, auto-detect CI config | | `[path]` | Audit specific workflow file or CI config directory | | `--speed-only` | CI1, CI7, CI9, CI10 only -- focus on pipeline duration | | `--security-only` | CI5, CI6 only -- focus on secret handling and action pinning | --- ## Safety Gate This audit is **read-only**. The only ...