security

Enforce secure coding practices by applying specified security patterns for authentication, input validation, and secrets management. This approach provides required toolchain checks and configuration defaults to satisfy security standards across APIs and web apps.

The best way to configure CSP and CORS policies is by using the provided checklists and samples for vulnerability remediation. This ensures your web applications meet OWASP compliance standards through enforced configuration defaults.

Implement WebAuthn and cookie-based sessions securely by following the Skill's authentication and authorization guidance. It specifies the required security patterns and best practices to harden token and cookie-based session management.

Yes, you can use this workflow for security reviews and compliance checks in microservices. The Skill applies secure coding practices and ongoing compliance checks across microservices, specifying required toolchain checks to satisfy defined standards.

Manage secrets and generate an SBOM by applying the Skill's guidance on secrets management and encrypted configs. It specifies the required toolchain checks and configuration defaults to properly handle SBOM generation and secure secret storage.