Automate infrastructure reviews for security, reliability, and maintainability gaps.
npx skills add https://github.com/curphey/bosun --skill devops-curphey
Please help me install this Agent Skill. Skill: devops Source: https://github.com/curphey/bosun/tree/main/skills/devops Command: npx skills add https://github.com/curphey/bosun --skill devops-curphey
Infrastructure teams struggle to systematically identify security gaps, misconfigurations, and reliability risks across cloud-native stacks.
Initiate a structured DevOps review across your Dockerfiles, Kubernetes manifests, Terraform, and CI/CD pipelines.
High-intent search queries and answers about installing and using this skill.
Automate infrastructure security checks by running a structured review workflow that audits Kubernetes manifests and Terraform templates for secrets management, least privilege violations, and missing health checks, yielding actionable remediation guidance.
Auditing Dockerfiles and CI/CD pipelines for misconfigurations requires an automated infrastructure review that enforces checks for reliability risks and security gaps, delivering operator-friendly remediation guidance to resolve recurring infra issues.
Yes, the infrastructure review process supports CloudFormation templates and on-premises environments, applying systematic checks for maintainability gaps, security risks, and governance validation across both cloud and on-premises infrastructure code.
Validate governance and compliance by executing pre-deployment security checks on your infrastructure code, enforcing reliability standards and least privilege policies across Dockerfiles, IaC, and CI/CD pipelines to identify gaps before release.
Yes, the DevOps review workflow enforces checks for resource limits and health checks in Kubernetes manifests, systematically surfacing reliability risks and missing configurations while providing actionable remediation guidance to fix them.
kfolkesScan Infrastructure as Code for security misconfigurations and compliance violations using Checkov.
SjdjdiejdrirhdkjejRun post-implementation quality gates and generate reports before release.
devendrapratapsinghScan code, containers, and infrastructure for security vulnerabilities.
R2W1csLint and validate JavaScript and Python code for syntax and style issues.
