skills.rest
martinholovsky
martinholovskyCOMMUNITY
Explore all skills by this author →
𝕏@martinholovskyGitHub

devsecops-expert

Automate security gates for CI/CD pipelines with SAST, SCA, and secret scanning.

45|4|Updated Nov 25, 2025
Search Tags:#ci/cd#security#compliance#pipeline#container security#iac#devsecops
One-click install
npx skills add https://github.com/martinholovsky/claude-skills-generator --skill devsecops-expert
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: devsecops-expert
Source: https://github.com/martinholovsky/claude-skills-generator/tree/main/skills/devsecops-expert
Command: npx skills add https://github.com/martinholovsky/claude-skills-generator --skill devsecops-expert

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides expert guidance and implementation patterns for integrating robust security practices throughout the software development lifecycle, from code to deployment.

Core Features & Use Cases

  • Secure CI/CD: Design and implement secure pipelines with automated security gates.
  • Shift-Left Security: Integrate SAST, SCA, and secret scanning early in the development process.
  • Infrastructure Security: Secure IaC, containers, and Kubernetes deployments.
  • Use Case: A team is struggling with vulnerabilities slipping into production. They can use this Skill to implement a comprehensive security pipeline that automatically scans code, dependencies, and container images, blocking insecure deployments.

Quick Start

Implement a multi-stage security gate pipeline for a pull request using the provided GitHub Actions workflow.

Frequently Asked Questions about devsecops-expert

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I build a secure CI/CD pipeline with automated security gates?▼

Shift-left security integrates SAST, SCA, and secret scanning early in the development process, catching vulnerabilities at the code commit stage rather than after deployment.

How do I scan Infrastructure as Code and containers for security vulnerabilities?▼

Implementing a multi-stage security gate pipeline for pull requests using GitHub Actions workflows provides a practical starting point for automating code, dependency, and image scanning.

What is shift-left security and how does it prevent vulnerabilities in production?▼

Shift-left security integrates SAST, SCA, and secret scanning early in the development process, catching vulnerabilities at the code commit stage rather than after deployment.

Does this DevSecOps approach work for compliance and supply chain integrity requirements?▼

This approach satisfies compliance and supply chain integrity requirements by automating security gates, IaC scanning, and secrets management throughout the software development lifecycle.

How do I start implementing security gates for pull requests using GitHub Actions?▼

Implementing a multi-stage security gate pipeline for pull requests using GitHub Actions workflows provides a practical starting point for automating code, dependency, and image scanning.

Related Skills

Explore More Software Engineering Skills→
diriendirien
19

devops-engineer

Generate CI/CD pipelines, Dockerfiles, Kubernetes manifests, and infrastructure-as-code templates.

Community
Advanced
devkenidevkeni
1

container-security

Scan Docker images, audit Kubernetes clusters, and monitor container runtimes for security weaknesses.

Community
Advanced
nikhillinitnikhillinit

security-scanner

Detect security vulnerabilities, secrets, and misconfigurations in codebases.

Community
Advanced
gitgoodordietryinggitgoodordietrying
1

security-audit

Audit codebases and infrastructure for dependency vulnerabilities, secrets, and misconfigurations.

Community
Advanced