What problem does it solve? Setting up secure CI/CD pipelines, hardened containers, cloud infrastructure, and monitoring from scratch is error-prone and time-consuming, and misconfigurations create security vulnerabilities that are costly to fix later. ## Core Features & Use Cases - CI/CD Pipeline Setup & Hardening: Ready-to-adapt GitHub Actions and GitLab CI templates with built-in security scanning (Semgrep, Trivy, Checkov, Gitleaks) and least-privilege permissions. - Container & Kubernetes Security: Secure Dockerfile templates, Pod Security Standards, network policies, and RBAC configurations for hardened deployments. - Cloud & IaC Security: Terraform starters, AWS/GCP/Azure security checklists, IAM least-privilege patterns, and compliance mappings (SOC 2, PCI-DSS, HIPAA, ISO 27001). - Use Case: You need to ship a new service. Use this Skill to generate a hardened GitHub Actions pipeline with SAST/SCA/container scanning, a non-root multi-stage Dockerfile, and a monitoring stack with essential alerts—then enforce the rule that nothing ships while CI is red. ## Quick Start Set up a secure CI/CD pipeline with security scanning and a hardened Dockerfile for my Node.js application.
