Automate CI/CD security testing with SAST, DAST, dependency, secret, and container scans.
npx skills add https://github.com/CybLow/pypaginate --skill sec-ops-cyblow
Please help me install this Agent Skill. Skill: sec-ops Source: https://github.com/CybLow/pypaginate/tree/main/.opencode/skills/sec-ops Command: npx skills add https://github.com/CybLow/pypaginate --skill sec-ops-cyblow
Automates security testing workflows across CI/CD pipelines by aggregating SAST, DAST, dependency scanning, secrets detection, and container security.
Configure your CI to run the security pipeline against your project, triggering SAST, DAST, and secret scans on each PR.
High-intent search queries and answers about installing and using this skill.
Automate SAST and DAST scans in GitHub Actions by configuring a CI pipeline that triggers Bandit, Semgrep, and OWASP ZAP on each pull request. This setup evaluates code and runtime behavior to block PRs with critical findings.
Detect secrets in a CI/CD pipeline by integrating TruffleHog and Gitleaks into your GitHub Actions workflow. These tools scan pull requests and releases to identify and report exposed secrets automatically.
Dependency scanning with pip-audit works in a release pipeline by checking your Python dependencies against known vulnerability databases. Running pip-audit during releases generates security reports to inform risk remediation.
Yes, you can use Trivy to scan containers in GitHub Actions. Integrating Trivy into your CI/CD pipeline allows you to automatically scan container images for vulnerabilities during pull requests and releases.
You need STRIDE threat modeling for software development when analyzing potential security threats across your application architecture. It provides structured guidance and templates for identifying vulnerabilities during the design phase.
Yes, automated security testing can block pull requests with critical findings. By integrating SAST, DAST, and secret detection into GitHub Actions, the pipeline automatically halts PRs when critical vulnerabilities are detected.
andrewvaughanRun SAST, STRIDE, and attack-tree analysis to produce prioritized audit reports.
webrix-aiCorrelate CVE scan results with infrastructure to prioritize patching and create Jira tickets.
devendrapratapsinghAudit container images, Kubernetes configurations, cloud environments, and infrastructure as code for security vulnerabilities.
dandudziAutomate SAST tool selection, configuration, and CI/CD integration.
