Plugins
1 pluginResults for “ci-cd-security”
38 skills
diegosouzapw Cicd
Guides setting up CI/CD pipelines with GitHub Actions, testing, and deployment strategies.
54 · bundle
mukul975 Detecting Supply Chain Attacks In CI CD
Scans GitHub Actions workflows and CI/CD pipeline configurations for supply chain attack vectors including unpinned actions, script injection via expressions, dependency confusion, and secrets exposure.
24.6k · bundle
zhaoxuya520 Supply Chain Security
Assess software supply chain security by generating SBOMs, scanning dependencies, auditing CI/CD pipelines, analyzing container images, and verifying vulnerability reachability.
12.8k · bundle
neuralblitz Cicd
Designs and implements CI/CD pipelines, automating build, test, and deployment processes with security scanning and deployment strategies.
1
mukul975 Performing API Security Testing With Postman
Builds repeatable API security test suites in Postman covering OWASP API Security Top 10 vulnerabilities, with automated authentication, multi-role testing, and CI/CD integration via Newman.
24.6k · bundle
affaan-m Github Ops
Manage GitHub repositories: triage issues, review PRs, debug CI/CD, prepare releases, and monitor security alerts using the gh CLI.
226k
More results
mukul975 Implementing Devsecops Security Scanning
Integrates SAST, DAST, and SCA security scanning into CI/CD pipelines using open-source tools like Semgrep, Trivy, OWASP ZAP, and Gitleaks.
24.6k · bundle
mukul975 Implementing Supply Chain Security With In Toto
Verify container image integrity across CI/CD pipelines using the in-toto framework to generate and check cryptographically signed attestations.
24.6k · bundle
mukul975 Performing Container Security Scanning With Trivy
Scan container images, filesystems, and Kubernetes manifests for vulnerabilities, misconfigurations, exposed secrets, and license compliance issues using Aqua Security Trivy with SBOM generation and CI/CD integration.
24.6k · bundle
mukul975 Integrating Dast With Owasp Zap In Pipeline
Integrates OWASP ZAP for Dynamic Application Security Testing in CI/CD pipelines, configuring baseline, full, and API scans, interpreting findings, tuning policies, and establishing quality gates in GitHub Actions and GitLab CI.
24.6k · bundle
mukul975 Scanning Docker Images With Trivy
Scan Docker images for vulnerabilities, misconfigurations, secrets, and license violations using Trivy, with CI/CD integration and policy enforcement.
24.6k · bundle
trailofbits Agentic Actions Auditor
Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations, detecting attack vectors where attacker-controlled input reaches AI agents in CI/CD pipelines.
6k · bundle
mukul975 Implementing Semgrep For Custom Sast Rules
Write custom Semgrep SAST rules in YAML to detect application-specific vulnerabilities, enforce coding standards, and integrate into CI/CD pipelines.
24.6k · bundle
mukul975 Implementing Fuzz Testing In Cicd With Aflplusplus
Integrate AFL++ coverage-guided fuzz testing into CI/CD pipelines to discover memory corruption, input handling, and logic vulnerabilities in C/C++ and compiled applications.
24.6k · bundle
getsentry Gha Security Review
Audits GitHub Actions workflows for exploitable vulnerabilities with concrete attack scenarios.
845 · bundle
mukul975 Implementing Secrets Scanning In CI CD
Integrate gitleaks and trufflehog into CI/CD pipelines to detect leaked secrets before deployment.
24.6k · bundle
antfu Pnpm
Manage Node.js dependencies with pnpm, including workspaces, catalogs, patches, and supply-chain security.
5.5k · bundle
addyosmani CI CD And Automation
Automates CI/CD pipeline setup, quality gates, test runners, and deployment strategies for GitHub Actions.
69.5k
leandrobenjaminl CI CD Pilot
Diseña y optimiza pipelines de CI/CD para GitHub Actions y GitLab CI, incluyendo automatización de tests, linting, builds y deploys.
0
mukul975 Scanning Containers With Trivy In Cicd
Integrate Trivy vulnerability scanning into CI/CD pipelines to detect container image CVEs, Dockerfile misconfigurations, and enforce severity-based quality gates.
24.6k · bundle
mukul975 Performing Android App Static Analysis With Mobsf
Automates static analysis of Android APK/AAB files using MobSF to identify hardcoded secrets, insecure permissions, vulnerable components, and weak cryptography for pre-deployment security assessments or CI/CD integration.
24.6k · bundle
alirezarezvani CI CD Pipeline Builder
Generate pragmatic CI/CD pipelines from detected project stack signals, with fast baseline generation, repeatable checks, and environment-aware deployment stages.
20.4k · bundle
neuralblitz CI CD
Designs and implements CI/CD pipelines with automated testing, build automation, deployment, and rollback strategies.
1
mukul975 Scanning Iac And Images With Trivy
Scan container images, IaC, and SBOMs for vulnerabilities and misconfigurations in CI/CD with Trivy.
24.6k · bundle
mukul975 Securing Github Actions Workflows
Hardens GitHub Actions workflows against supply chain attacks, credential theft, and privilege escalation by pinning actions to SHA digests, minimizing GITHUB_TOKEN permissions, preventing script injection, and implementing workflow change controls.
24.6k · bundle
mhassan0000 Github Ops
Manage GitHub repositories via the gh CLI: triage issues, review PRs, debug CI failures, create releases, and monitor security alerts.
1
phoroth Bash Pro
Write defensive, portable Bash scripts for automation, CI/CD, and system utilities, with strict error handling, safe argument parsing, and testing.
3
drnabeelkhan CI CD
Applies the CI/CD framework to structure analysis, guide decision-making, and improve outcomes in engineering devops contexts.
2
chimeranext Github Actions
Configures GitHub Actions CI/CD pipelines for Flutter and backend monorepos, including testing, building, and deployment workflows.
4
sakamoto-family-smile Github Ops
Manages GitHub repositories via the gh CLI: triaging issues, reviewing PRs, debugging CI failures, preparing releases, and monitoring security alerts.
0
mukul975 Implementing Aqua Security For Container Scanning
Deploy Aqua Security's Trivy scanner to detect vulnerabilities, misconfigurations, secrets, and license issues in container images across CI/CD pipelines and registries.
24.6k · bundle
tinh2 Secrets
Audits codebases for leaked secrets and hardcoded credentials, generates .env templates, configures secrets management with AWS Secrets Manager, Vault, Doppler, or GCP Secret Manager, sets up credential rotation, and integrates secrets into CI/CD pipelines via OIDC federation.
13
affaan-m Opensource Pipeline
Fork, sanitize, and package private projects for safe public release through a three-stage pipeline.
226k
mukul975 Securing Container Registry Images
Scan container images for vulnerabilities with Trivy and Grype, generate SBOMs, sign images with Cosign and Sigstore, configure registry access controls, and enforce security gates in CI/CD pipelines.
24.6k · bundle
chimeranext Static Analysis
Configures and runs static analysis and linting tools across multiple languages, integrating with CI/CD and security platforms.
4
alirezarezvani Env Secrets Manager
Audit environment-variable hygiene and secrets safety across local development and production with practical scanning, drift awareness, and rotation readiness.
20.4k · bundle