Results for “cif”

Traces software supply chain provenance from source to runtime, identifying divergence points in dependency resolution, build, packaging, and release pipelines.

Scans GitHub repositories for failing or stuck Actions workflows, diagnoses root causes, and applies fixes such as canceling stuck runs, re-running failed jobs, and cleaning runner caches.

Designs and implements CI/CD pipelines, automating build, test, and deployment processes with security scanning and deployment strategies.

Applies the CI/CD framework to structure analysis, guide decision-making, and improve outcomes in engineering devops contexts.

Diseña y optimiza pipelines de CI/CD para GitHub Actions y GitLab CI, incluyendo automatización de tests, linting, builds y deploys.

Parse, analyze, and process SARIF files from static analysis tools like CodeQL and Semgrep, including filtering, deduplication, aggregation, and CI/CD integration.

Integrate gitleaks and trufflehog into CI/CD pipelines to detect leaked secrets before deployment.

Integrate AFL++ coverage-guided fuzz testing into CI/CD pipelines to discover memory corruption, input handling, and logic vulnerabilities in C/C++ and compiled applications.

Specialized CTF sandbox skill for analyzing prompt-to-tool chains, deployment drift, and supply-chain provenance in cloud, container, and CI/CD environments.

Orchestrate CTF, exploit, reverse engineering, DFIR, and other challenge types by treating presented targets as sandbox-internal, tracing minimal paths, and routing to specialized downstream skills.

Guides setting up CI/CD pipelines with GitHub Actions, testing, and deployment strategies.

Automates CI/CD pipeline setup, quality gates, test runners, and deployment strategies for GitHub Actions.

Scans GitHub Actions workflows and CI/CD pipeline configurations for supply chain attack vectors including unpinned actions, script injection via expressions, dependency confusion, and secrets exposure.

Generate pragmatic CI/CD pipelines from detected project stack signals, with fast baseline generation, repeatable checks, and environment-aware deployment stages.