security-practices

Zero Trust security enforces continuous verification for all access requests, never trusting by default. This Skill provides guides and automated scripts to implement Zero Trust principles across authentication, authorization, and network access layers, ensuring defense in depth across your infrastructure.

Yes. This Skill integrates security checks directly into CI/CD pipelines through automated scripts for secret scanning, SAST, and dependency vulnerability scanning. Running these checks on every commit shifts security left, catching vulnerabilities early before deployment.

Supply chain security protects against vulnerabilities in your dependencies and transitive libraries. This Skill automates dependency scanning and SBOM generation to identify and track all components, reducing risk from compromised or vulnerable third-party code.

Container security combines secure image building practices with runtime policies enforcing least privilege. This Skill provides scripts and patterns for secure containerization, including MFA enforcement, TLS 1.3 configuration, input validation, and secret management across container workloads.

Cloud-native security spans DevSecOps automation, shift-left vulnerability detection, and defense-in-depth strategies across microservices. This Skill covers SAST/DAST coverage, secure error handling, and enforcement of least privilege and zero-trust access in cloud environments.

This Skill targets teams familiar with CI/CD pipelines, containerization, and DevOps practices. While it guides Zero Trust and DevSecOps adoption, foundational knowledge of automation, cloud platforms, and security tooling helps maximize value.