devsecops-lookup

Retrieve OWASP DevSecOps guideline phases, tools, and CWE mappings.

3|1|Updated Dec 23, 2025

Search Tags:#ci/cd #owasp #pipeline #sast #devsecops #sca

Ready to run

npx skills add https://github.com/naporin0624/claude-web-audit-plugins --skill devsecops-lookup

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: devsecops-lookup
Source: https://github.com/naporin0624/claude-web-audit-plugins/tree/main/skills/devsecops-lookup
Command: npx skills add https://github.com/naporin0624/claude-web-audit-plugins --skill devsecops-lookup

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides OWASP DevSecOps guideline-based lookups for pipeline phases, tools, and CWE mappings.

Core Features & Use Cases

Quick access to tool configurations and integration patterns.
CWE coverage mapping to DevSecOps phases.

Quick Start

Example: npx devsecops-lookup

Frequently Asked Questions about devsecops-lookup

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I integrate security scanning into my CI/CD pipeline?▼

DevSecOps integrates security scanning across CI/CD pipeline phases—from secret detection and SAST during development and build, through SCA and DAST in testing, to container security and IaC checks in deployment and operations. This Skill retrieves OWASP-aligned tools, configurations, and integration patterns for each phase to automate security checks without disrupting deployment velocity.

What OWASP DevSecOps phases and tools should I use for automated security testing?▼

OWASP DevSecOps defines five phases—Develop, Build, Test, Deploy, Operate—each with specific security tools and checks. This Skill provides guideline-based tool lookups, configurations, and CWE mappings so you can select appropriate scanners (SAST, SCA, DAST, container tools) and integrate them into your pipeline without manual research.

How do I map security vulnerabilities to CWE in my DevSecOps workflow?▼

CWE mappings connect detected vulnerabilities to standardized weakness classifications across DevSecOps phases. This Skill retrieves official CWE-to-phase mappings alongside tool configurations and OWASP guidelines, enabling consistent vulnerability classification and remediation tracking throughout your pipeline.

What's the fastest way to look up DevSecOps tool configurations and references?▼

This Skill provides instant, vector-embedding-friendly lookup of DevSecOps tool configurations, integration patterns, CWE mappings, and official OWASP references in a repeatable format. Run it to retrieve phase-specific tools and guidance without navigating multiple documentation sources.

Can I use this for secret detection and container security in my pipeline?▼

Yes. This Skill covers secret detection in the Develop and Build phases, plus container security and IaC checks in Deploy and Operate phases. It retrieves OWASP-aligned tool recommendations and configurations for each security check type across your full pipeline lifecycle.

What format does this Skill return tool data and CWE mappings in?▼

This Skill returns tool configurations, CWE mappings, integration patterns, and official OWASP references in a repeatable, vector-embedding-friendly format designed for programmatic access and reuse across CI/CD planning and operational security scenarios.