Packs

5 packs

Project Verification Pipeline

For developers running comprehensive verification pipelines for Laravel or Quarkus projects before PRs or releases.

4 skills · pack

DotNet Test Migration to MTP

Migrate .NET test projects from VSTest to MTP, updating project files, CLI, and CI/CD pipelines.

3 skills · pack

FP-TS Backend Toolkit

For Node.js/Deno developers building type-safe backends with fp-ts, covering async pipelines and service composition.

3 skills · pack

AI and ML skills for .NET: technology selection, LLM integration, agentic workflows, RAG pipelines, MCP, and classic ML with ML.NET.

5 skills · pack

Deploy Azure ML Pipeline

Manage Azure Machine Learning resources including workspaces, jobs, models, data, compute, and pipelines using the SDK v2 for Python.

3 skills · pack

Results for “pipelines”

8 skills

implementing-semgrep-for-custom-sast-rules

Write custom Semgrep SAST rules in YAML to detect application-specific vulnerabilities, enforce coding standards, and integrate into CI/CD pipelines.

24.6k · bundle

implementing-supply-chain-security-with-in-toto

Verify container image integrity across CI/CD pipelines using the in-toto framework to generate and check cryptographically signed attestations.

24.6k · bundle

analyzing-supply-chain-malware-artifacts

Investigate supply chain attack artifacts including trojanized software updates, compromised build pipelines, and sideloaded dependencies to identify intrusion vectors and scope of compromise.

24.6k · bundle

More results

implementing-sigstore-for-software-signing

Signs and verifies software artifacts using Sigstore's keyless signing, Rekor transparency log, and Fulcio certificate authority, integrating into CI/CD pipelines and Kubernetes admission controls.

24.6k · bundle

agentic-actions-auditor

Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations, detecting attack vectors where attacker-controlled input reaches AI agents in CI/CD pipelines.

securing-container-registry-images

Scan container images for vulnerabilities with Trivy and Grype, generate SBOMs, sign images with Cosign and Sigstore, configure registry access controls, and enforce security gates in CI/CD pipelines.

24.6k · bundle

implementing-policy-as-code-with-open-policy-agent

Enforce organizational security policies across Kubernetes clusters and CI/CD pipelines using Open Policy Agent (OPA) and Gatekeeper, including writing Rego policies, deploying admission controllers, and testing policies locally.

24.6k · bundle

integrating-sast-into-github-actions-pipeline

Integrates Static Application Security Testing (SAST) tools—CodeQL and Semgrep—into GitHub Actions CI/CD pipelines, configuring automated code scanning, tuning rules, uploading SARIF results, and establishing quality gates that block merges on high-severity vulnerabilities.

24.6k · bundle