{"id":50183378,"url":"https://github.com/sagar-grv/shipkit","last_synced_at":"2026-05-25T08:04:04.720Z","repository":{"id":359718798,"uuid":"1247103427","full_name":"sagar-grv/shipkit","owner":"sagar-grv","description":"⚓ ShipKit - MVP to Production Pipeline. Connect your AI agent, CI/CD, security, and deploy. One command, any stack.","archived":false,"fork":false,"pushed_at":"2026-05-23T06:32:55.000Z","size":68,"stargazers_count":1,"open_issues_count":1,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-05-23T06:35:10.030Z","etag":null,"topics":["ai-agents","cicd","claude-code","cursor","developer-tools","mvp-to-production","pipeline","production-deployment","shipkit","solo-dev"],"latest_commit_sha":null,"homepage":null,"language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/sagar-grv.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null},"funding":{"github":"sagar-grv"}},"created_at":"2026-05-22T22:52:50.000Z","updated_at":"2026-05-23T06:32:59.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/sagar-grv/shipkit","commit_stats":null,"previous_names":["sagar-grv/shipkit"],"tags_count":null,"template":false,"template_full_name":null,"purl":"pkg:github/sagar-grv/shipkit","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sagar-grv%2Fshipkit","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sagar-grv%2Fshipkit/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sagar-grv%2Fshipkit/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sagar-grv%2Fshipkit/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/sagar-grv","download_url":"https://codeload.github.com/sagar-grv/shipkit/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sagar-grv%2Fshipkit/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33457339,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-24T19:21:36.376Z","status":"online","status_checked_at":"2026-05-25T02:00:05.812Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["ai-agents","cicd","claude-code","cursor","developer-tools","mvp-to-production","pipeline","production-deployment","shipkit","solo-dev"],"created_at":"2026-05-25T08:03:58.004Z","updated_at":"2026-05-25T08:04:04.711Z","avatar_url":"https://github.com/sagar-grv.png","language":"JavaScript","funding_links":["https://github.com/sponsors/sagar-grv"],"categories":[],"sub_categories":[],"readme":"# ShipKit — Your Automated Dev Team\n\n\u003e **One command sets up CI/CD, health monitoring, security, and AI agent config.**\n\u003e Reads your project. Generates only what you need. Zero questions. Works everywhere.\n\n[![npm](https://img.shields.io/npm/v/shipkit-pipe)](https://www.npmjs.com/package/shipkit-pipe)\n[![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](LICENSE)\n[![CI](https://github.com/sagar-grv/shipkit/actions/workflows/validate.yml/badge.svg)](https://github.com/sagar-grv/shipkit/actions)\n\n▶️ **[Watch overview video](https://github.com/sagar-grv/shipkit/releases/download/v3.1.0/shipkit-overview.mp4)** — AI-generated explainer (NotebookLM)\n\n```bash\nnpx shipkit-pipe              # Auto-detect \u0026 generate\nnpx shipkit-pipe --dry-run    # Preview without writing\nnpx shipkit-pipe check        # Verify everything works\n```\n\n## ✨ What Makes ShipKit Different\n\n| Before ShipKit | After `npx shipkit-pipe` |\n|---|---|\n| Manually configure CI/CD for every project | CI auto-generated from your scripts |\n| CI fails because config doesn't match your package.json | Smart CI — only generates steps for scripts that exist |\n| No health monitoring — find out your site is down from users | Health check pings every 6h, auto-creates GitHub Issues |\n| Set up CodeQL, Dependabot, security manually | Security + dependency updates generated automatically |\n| Write separate prompts for your AI agent | AGENTS.md + shipkit.json — agent knows your stack |\n| GitLab / Bitbucket? Must write CI from scratch | Detects your platform, generates the right format |\n\n## 🚀 Quick Start\n\n```bash\n# In any project directory:\nnpx shipkit-pipe\n\n# That's it. Your pipeline is ready.\n```\n\n📖 **Detailed usage guide, scenarios, and troubleshooting → [USAGE.md](USAGE.md)**\n\n**What gets generated:**\n\n| File | Purpose |\n|---|---|\n| `shipkit.json` | Project config — AI agent reads this |\n| `AGENTS.md` | Universal AI agent protocol |\n| `.github/workflows/ci.yml` | Smart CI — only scripts you have (lint → test → build) |\n| `.github/workflows/health.yml` | Pings your site every 6h, creates issue if down |\n| `.github/dependabot.yml` | Weekly dependency updates |\n| `.github/workflows/codeql.yml` | Security vulnerability scan |\n| `.github/workflows/auto-merge.yml` | Auto-merges safe Dependabot PRs |\n\n**For GitLab:** generates `.gitlab-ci.yml` instead of GitHub Actions.\n**For Bitbucket:** generates `bitbucket-pipelines.yml`.\n\n## 🧠 How Detection Works\n\nShipKit reads your existing files — it never asks what it can detect:\n\n| What | Reads from |\n|---|---|\n| Framework | `package.json` dependencies (next, react, vue, express, etc.) |\n| Scripts | `package.json` scripts — only includes what exists |\n| Package manager | `pnpm-lock.yaml`, `yarn.lock`, `bun.lockb` |\n| Node version | `.nvmrc`, `.node-version`, or `engines.node` |\n| Git platform | `git remote origin URL` (GitHub / GitLab / Bitbucket) |\n| Deploy URL | `vercel.json`, `fly.toml`, or `package.json` homepage |\n| Monorepo | Scans `frontend/`, `backend/`, `web/` subdirectories |\n| Non-Node | Detects `pyproject.toml`, `go.mod`, `Cargo.toml`, `docker-compose.yml` |\n\n## 📋 Commands\n\n| Command | Description |\n|---|---|\n| `npx shipkit-pipe` | Auto-detect \u0026 generate (default, no prompts) |\n| `npx shipkit-pipe --dry-run` | Preview what would be generated |\n| `npx shipkit-pipe check` | Validate CI, ping site, check deps |\n| `npx shipkit-pipe check --json` | Machine-readable check output |\n| `npx shipkit-pipe upgrade` | Check for newer version |\n| `npx shipkit-pipe --force` | Overwrite existing files |\n| `npx shipkit-pipe -i` | Interactive mode (ask questions) |\n| `npx shipkit-pipe --help` | Show help |\n| `npx shipkit-pipe --version` | Show version |\n\n## 🔧 Alternate Install Methods\n\n```bash\n# Linux / macOS (no Node.js?):\ncurl -fsSL https://raw.githubusercontent.com/sagar-grv/shipkit/main/setup.sh | bash\n\n# Windows PowerShell:\nirm https://raw.githubusercontent.com/sagar-grv/shipkit/main/setup.ps1 | iex\n\n# Or globally:\nnpm install -g shipkit-pipe\n```\n\n## 🏗️ What You Get\n\n### Smart CI/CD\nGenerates GitHub Actions (or GitLab CI, or Bitbucket Pipelines) that only include steps for scripts that exist in your `package.json`. Have a `lint` script? You get a lint step. No `test` script? No test step. **Your CI never fails because of bad config.**\n\n### Health Monitoring\nA GitHub Action workflow pings your production site every 6 hours. If it's down → auto-creates a GitHub Issue. When it recovers → auto-closes the issue. **You know before your users do.**\n\n### Security Scanning\nCodeQL scans every push + PR for vulnerabilities. Dependabot opens auto-PRs when dependencies need updates. **No manual checking.**\n\n### AI Agent Memory\nGenerates `AGENTS.md` and `shipkit.json` so your AI agent (Claude Code, Cursor, GitHub Copilot, OpenCode) knows your stack, your rules, and what happened last session.\n\n## 🔐 Security Gates\n\n| Gate | What It Catches | When | Who |\n|---|---|---|---|\n| CI (lint → test → build) | Code quality, broken tests, build failures | Push / PR | Auto |\n| CodeQL | 100+ vulnerability classes | Every push | Auto |\n| Dependabot | Vulnerable npm/GitHub Actions deps | Weekly | Auto |\n| Health check | Site down / unreachable | Every 6h | Auto |\n\n## 🤝 Supported Platforms\n\n| Category | Supported |\n|---|---|\n| **Git platforms** | GitHub, GitLab, Bitbucket |\n| **AI Agents** | Claude Code, Cursor, GitHub Copilot, OpenCode, CodeGPT, any |\n| **Frontend** | Next.js, React, Vue, Svelte, Astro, Nuxt, Express, any |\n| **Backend** | Node.js, Python, Go, Rust, Docker |\n| **Deploy** | Vercel, Netlify, Fly.io, Railway, Render, Docker, any |\n| **Package Managers** | npm, pnpm, yarn, bun |\n| **Project types** | Single app, monorepo, empty directory, any framework |\n\n## 📄 License\n\nApache 2.0 — Free to use, modify, and share.\n\n---\n\n**ShipKit** — Because your solo project deserves a production pipeline.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsagar-grv%2Fshipkit","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsagar-grv%2Fshipkit","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsagar-grv%2Fshipkit/lists"}