secure

Scan code, dependencies, and containers for vulnerabilities and generate SBOMs.

3|3|Updated Jan 4, 2026

Search Tags:#security #compliance #enforcement #supply-chain #sbom #vulnerability-scanning #github-apps

Ready to run

npx skills add https://github.com/adaptive-enforcement-lab/claude-skills --skill secure-adaptive-enforcement-lab

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: secure
Source: https://github.com/adaptive-enforcement-lab/claude-skills/tree/main/plugins/secure/skills/secure
Command: npx skills add https://github.com/adaptive-enforcement-lab/claude-skills --skill secure-adaptive-enforcement-lab

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This skill helps teams discover and remediate security issues across code, dependencies, containers, and the software supply chain to reduce risk and incidents.

Core Features & Use Cases

Vulnerability scanning to identify CVEs in code, dependencies, and images.
SBOM generation to document and manage your software supply chain.
Supply-chain security practices and enforcement to prevent risky components from being deployed.
Secure authentication workflows and governance through GitHub Apps and CI/CD integrations.

Quick Start

Install a GitHub App-based workflow, enable vulnerability scanning, and generate SBOMs to begin securing your project.

Frequently Asked Questions about secure

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan code and dependencies for CVEs in a CI pipeline?▼

SBOM generation documents and manages your software supply chain by creating an inventory of components in your project. You need SBOM generation to track dependencies, discover supply chain risks, and enforce security policies preventing risky deployments.

Can I use GitHub Apps to enforce supply chain security policies?▼

Yes, you can use GitHub Apps to enforce supply chain security policies and secure authentication workflows. By integrating a GitHub App-based workflow, you apply enforceable security rules directly within your repositories and CI/CD pipelines to mitigate risks.

What's the best way to secure containers and repositories before deployment?▼

The best way to secure containers and repositories before deployment is applying supply-chain security practices and enforcement across your development pipelines. This involves scanning images for vulnerabilities and generating SBOMs to prevent risky components from being deployed.

How do I generate an SBOM to manage software supply chain risks?▼

To generate an SBOM and manage software supply chain risks, configure SBOM generation within your standard DevOps tooling. This creates a documented inventory of your dependencies, allowing you to discover and mitigate vulnerabilities across your components.

Does vulnerability scanning work with existing DevOps tooling?▼

Yes, vulnerability scanning works with existing DevOps tooling by applying enforceable security policies directly within development pipelines, containers, and CI workflows. Configuration of standard DevOps integrations is required to discover and mitigate supply chain risks.