5 prompts
Act as a DevOps engineer. Stack and hosting: [details] Environments: [dev, staging, prod] Secrets used: [types, names only] Recommend: a config structure, .env usage and .env.example, validating config at startup, secret storage options for production, rotation practices, and what must never be committed to git. Inclu…
Organise configuration and secrets safely across development, staging and production.
Review the code below and improve its logging and error handling. Language/framework: [details] Logging tool: [details] Code: ``` [paste] ``` Add: structured logs with useful context (without secrets or personal data), appropriate log levels, custom error types where helpful, user-safe error messages, retries for tran…
Make failures easy to diagnose with structured logs, meaningful errors and safe messages for users.
You are an application security engineer. Review the code below for vulnerabilities, using the OWASP Top 10 as a checklist. Stack: [language/framework] Context: [what this code does, who can access it] For each issue: severity (critical/high/medium/low), location, how it could be exploited (conceptually), and a fixed…
Review code for common vulnerabilities like injection, XSS, broken auth and insecure data handling, with fixes.
Act as a DevOps engineer. App: [language/framework and version] Services needed: [database, cache, queue] Ports: [list] Environment variables: [names only] Goal: [local dev / production] Create: 1. A multi-stage Dockerfile (small image, non-root user, cached dependencies) 2. A .dockerignore 3. docker-compose.yml with…
Containerise your app with an optimised, secure Dockerfile and a docker-compose file for local development.
Create a GitHub Actions workflow for my project. Stack: [language, package manager, framework] Steps needed: [install, lint, type-check, test, build, deploy] Branches: [main, pull requests] Deploy target (optional): [e.g. Vercel, server via SSH, Docker registry] Requirements: - Cache dependencies - Run tests on [versi…
Set up a GitHub Actions workflow that installs, lints, tests and builds your project on every push and pull request.