Execute and interpret seven security checks in CI/CD pipelines.
npx skills add https://github.com/PP-Namias/Portfolio --skill ci-cd-security-pp-namias
Please help me install this Agent Skill. Skill: ci-cd-security Source: https://github.com/PP-Namias/Portfolio/tree/main/.agents/skills/ci-cd-security Command: npx skills add https://github.com/PP-Namias/Portfolio --skill ci-cd-security-pp-namias
This Skill manages and automates the execution of seven key security checks in the CI/CD pipeline of a project, reducing manual efforts and enhancing security posture.
Execute a full security check of the local project repository by running the gitleaks detect command provided in the skill instructions.
High-intent search queries and answers about installing and using this skill.
Automating CI/CD pipeline security checks involves integrating tools like Gitleaks, OSV-Scanner, and Trivy to continuously scan for secrets, CVEs, and configuration misconfigurations during active development. This reduces manual effort and enforces compliance automatically within the workflow.
CI/CD pipeline hardening utilizes tools like Gitleaks for secret detection, Trivy for vulnerability scanning, Checkov for configuration audits, and Scorecard for overall security posture. These tools automate security compliance and identify risks during active repository development.
Running CI/CD security checks locally is possible and recommended for troubleshooting. You can execute specific tools like `gitleaks detect` directly on your local project repository to identify secret detection issues and configuration audits before triggering the full pipeline.
The best way to scan repositories for secrets and CVEs is automating security checks within the CI/CD pipeline. Integrating Gitleaks for secret detection and OSV-Scanner for CVE scanning ensures continuous security auditing and immediate remediation strategies during active development.
Interpreting configuration audit results from CI/CD security scanners like Checkov involves analyzing the identified misconfigurations against compliance standards. The process targets repositories undergoing active development, providing actionable remediation strategies to improve code quality and pipeline security posture.
Pinning action SHAs and declaring permissions are workflow hardening practices that prevent supply chain attacks and enforce least privilege in CI/CD pipeline automation. These security checks ensure configuration compliance and protect the pipeline from unauthorized modifications.
nccasiaCreate GitHub Actions workflows for CI/CD testing, Docker builds, Kubernetes deployment, and security scanning.
jeremylongshoreScan PostgreSQL and MySQL databases for security vulnerabilities and generate remediation reports.
JosiahSiegelIntegrate Microsoft Defender for DevOps into Azure Pipelines for automated security scanning.
virtualrusselQuery Azure APIs to inspect resource configurations, security posture, and performance metrics.
