jenkinsfile-generator_skill

Overview

This skill generates production-ready Jenkinsfiles for both Declarative and Scripted pipeline syntaxes, applying CI/CD best practices. It produces validated, secure, and maintainable pipeline code ready for common build, test, deploy, and security scanning workflows. Use it to scaffold pipelines, parallel/matrix runs, and shared-library layouts.

How this skill works

The generator reads template assets and reference documents to assemble a Jenkinsfile with required blocks: agent, environment, options, parameters, stages, and post. It enforces safety patterns (timeouts, build discarders, disableConcurrentBuilds, fail-fast for parallel blocks) and adds credential bindings instead of hardcoded secrets. Every output is validated using the devops-skills:jenkinsfile-validator workflow and revised until ERROR-level issues are resolved.

When to use it

• Creating new CI/CD pipelines (Declarative recommended)
• Implementing parallel or matrix test suites
• Adding DevSecOps stages (SonarQube, Trivy, OWASP checks)
• Scaffolding shared libraries or repository-standard Jenkinsfiles
• Generating Docker or Kubernetes-based build agents

Best practices

• Prefer Declarative pipelines for readability and plugin compatibility; use Scripted only for complex dynamic logic
• Always validate generated Jenkinsfiles and fix ERRORs before use; address WARNINGS where practical
• Never hardcode secrets; use credentials() and withCredentials() bindings
• Add options: timeout, buildDiscarder, disableConcurrentBuilds, timestamps, parallelsAlwaysFailFast()
• Use post { always { cleanWs(); junit ... } } and archiveArtifacts with fingerprint: true for traceability

Example use cases

• Generate a Declarative Jenkinsfile for a Maven build running unit and integration tests in parallel
• Create a matrix pipeline to test multiple OS/browser combinations with fail-fast semantics
• Scaffold a pipeline that builds Docker images and pushes to a registry with registry credential binding
• Add DevSecOps stages: static analysis, dependency scanning, and container scanning with configurable fail thresholds
• Produce shared-library skeletons and helper vars for team-wide pipeline reuse