skills.rest
romankovsv
romankovsvCOMMUNITY
Explore all skills by this author →
GitHub

security-infra

Detect misconfigurations, secrets exposure, and policy violations in Terraform and Kubernetes deployments.

Updated Mar 29, 2026
Search Tags:#security#kubernetes#iac#static-analysis#zero-trust#policy-as-code#secrets-management
One-click install
npx skills add https://github.com/romankovsv/claude-code-python-devops-mlops --skill security-infra
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-infra
Source: https://github.com/romankovsv/claude-code-python-devops-mlops/tree/main/skills/security-infra
Command: npx skills add https://github.com/romankovsv/claude-code-python-devops-mlops --skill security-infra

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This content provides infrastructure security patterns and automated scanning for IaC and Kubernetes to prevent misconfigurations, secrets leakage, and policy violations.

Core Features & Use Cases

  • Checkov, tfsec, and OPA Gatekeeper integrations for IaC and Kubernetes governance.
  • Secrets scanning with gitleaks; pre-commit and CI security enforcement; Zero Trust and IAM least privilege guidance.
  • Use cases include securing Terraform/Kubernetes manifests, enforcing policy as code, auditing permissions, and secrets management.

Quick Start

Install and configure the security toolkit in your project and run the scans to enforce policy.

Frequently Asked Questions about security-infra

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Terraform for misconfigurations and policy violations?▼

Scan Terraform for misconfigurations by applying infrastructure security patterns to detect policy violations using Checkov and tfsec integrations. This enforces security-as-code requirements across your IaC deployments.

Can I enforce zero-trust and least-privilege IAM in Kubernetes manifests?▼

Yes, enforce zero-trust and IAM least-privilege in Kubernetes manifests by applying policy-as-code with OPA Gatekeeper. This audits permissions and prevents unauthorized access across deployments.

Does this approach detect secrets exposure in CI pipelines?▼

Yes, detect secrets exposure in CI pipelines by running gitleaks secrets scanning during pre-commit and CI security enforcement. This prevents secrets leakage in infrastructure code.

What is the best way to enforce policy as code for Kubernetes governance?▼

The best way to enforce policy as code for Kubernetes governance is integrating OPA Gatekeeper and Checkov to automatically audit permissions and detect misconfigurations across manifests.

Do I need pre-commit hooks to prevent secrets leakage in infrastructure code?▼

Pre-commit hooks are needed to prevent secrets leakage by running gitleaks scanning before code is committed. This CI security enforcement ensures secrets exposure is caught early in development.

Related Skills

Explore More Software Engineering Skills→
hardw00thardw00t
90

iac-security

Scan Infrastructure as Code configurations for misconfigurations and policy violations.

Community
Advanced
ersinkocersinkoc
56

sc-iac

Detect security misconfigurations in Dockerfiles, Kubernetes manifests, Terraform, and CI/CD workflows.

Community
Advanced
jayjpatel9717jayjpatel9717

iac-security

Automate infrastructure as code security scanning with Checkov, tfsec, and Trivy.

Community
Advanced
josemartinrodriguezmortalonijosemartinrodriguezmortaloni

securing-code

Scan Python code for SQL injection, hardcoded secrets, and command injection.

Community
Advanced