devsecops-lookup

DevSecOps integrates security scanning across CI/CD pipeline phases—from secret detection and SAST during development and build, through SCA and DAST in testing, to container security and IaC checks in deployment and operations. This Skill retrieves OWASP-aligned tools, configurations, and integration patterns for each phase to automate security checks without disrupting deployment velocity.

OWASP DevSecOps defines five phases—Develop, Build, Test, Deploy, Operate—each with specific security tools and checks. This Skill provides guideline-based tool lookups, configurations, and CWE mappings so you can select appropriate scanners (SAST, SCA, DAST, container tools) and integrate them into your pipeline without manual research.

CWE mappings connect detected vulnerabilities to standardized weakness classifications across DevSecOps phases. This Skill retrieves official CWE-to-phase mappings alongside tool configurations and OWASP guidelines, enabling consistent vulnerability classification and remediation tracking throughout your pipeline.

This Skill provides instant, vector-embedding-friendly lookup of DevSecOps tool configurations, integration patterns, CWE mappings, and official OWASP references in a repeatable format. Run it to retrieve phase-specific tools and guidance without navigating multiple documentation sources.

Yes. This Skill covers secret detection in the Develop and Build phases, plus container security and IaC checks in Deploy and Operate phases. It retrieves OWASP-aligned tool recommendations and configurations for each security check type across your full pipeline lifecycle.

This Skill returns tool configurations, CWE mappings, integration patterns, and official OWASP references in a repeatable, vector-embedding-friendly format designed for programmatic access and reuse across CI/CD planning and operational security scenarios.