Plugins

1 plugin

@alirezarezvani

37 advanced engineering skills: agent designer, agent workflow designer, RAG architect, database designer + schema designer + SQL assistant, migration architect, observability designer, dependency auditor, changelog generator (with semantic version bumper and hotfix/rollback procedures), API design reviewer, API test suite builder, CI/CD pipeline builder, MCP server builder, skill security auditor

33 skills · plugin

Results for “ci-cd-security”

42 skills

detecting-supply-chain-attacks-in-ci-cd

Scans GitHub Actions workflows and CI/CD pipeline configurations for supply chain attack vectors including unpinned actions, script injection via expressions, dependency confusion, and secrets exposure.

24.6k · bundle

supply-chain-security

Assess software supply chain security by generating SBOMs, scanning dependencies, auditing CI/CD pipelines, analyzing container images, and verifying vulnerability reachability.

12.8k · bundle

Runs Semgrep static analysis to find bugs and security vulnerabilities, with guidance on installation, rule selection, custom rule writing, and CI/CD integration.

performing-api-security-testing-with-postman

Builds repeatable API security test suites in Postman covering OWASP API Security Top 10 vulnerabilities, with automated authentication, multi-role testing, and CI/CD integration via Newman.

24.6k · bundle

implementing-devsecops-security-scanning

Integrates SAST, DAST, and SCA security scanning into CI/CD pipelines using open-source tools like Semgrep, Trivy, OWASP ZAP, and Gitleaks.

24.6k · bundle

implementing-supply-chain-security-with-in-toto

Verify container image integrity across CI/CD pipelines using the in-toto framework to generate and check cryptographically signed attestations.

24.6k · bundle

More results

performing-container-security-scanning-with-trivy

Scan container images, filesystems, and Kubernetes manifests for vulnerabilities, misconfigurations, exposed secrets, and license compliance issues using Aqua Security Trivy with SBOM generation and CI/CD integration.

24.6k · bundle

integrating-dast-with-owasp-zap-in-pipeline

Integrates OWASP ZAP for Dynamic Application Security Testing in CI/CD pipelines, configuring baseline, full, and API scans, interpreting findings, tuning policies, and establishing quality gates in GitHub Actions and GitLab CI.

24.6k · bundle

scanning-docker-images-with-trivy

Scan Docker images for vulnerabilities, misconfigurations, secrets, and license violations using Trivy, with CI/CD integration and policy enforcement.

24.6k · bundle

agentic-actions-auditor

Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations, detecting attack vectors where attacker-controlled input reaches AI agents in CI/CD pipelines.

implementing-semgrep-for-custom-sast-rules

Write custom Semgrep SAST rules in YAML to detect application-specific vulnerabilities, enforce coding standards, and integrate into CI/CD pipelines.

24.6k · bundle

implementing-fuzz-testing-in-cicd-with-aflplusplus

Integrate AFL++ coverage-guided fuzz testing into CI/CD pipelines to discover memory corruption, input handling, and logic vulnerabilities in C/C++ and compiled applications.

24.6k · bundle

Audit Claude Code configuration files for security vulnerabilities, misconfigurations, and injection risks using AgentShield.

gha-security-review

Audits GitHub Actions workflows for exploitable vulnerabilities with concrete attack scenarios.

performing-android-app-static-analysis-with-mobsf

Automates static analysis of Android APK/AAB files using MobSF to identify hardcoded secrets, insecure permissions, vulnerable components, and weak cryptography for pre-deployment security assessments or CI/CD integration.

24.6k · bundle

implementing-aqua-security-for-container-scanning

Deploy Aqua Security's Trivy scanner to detect vulnerabilities, misconfigurations, secrets, and license issues in container images across CI/CD pipelines and registries.

24.6k · bundle

Authorized security assessment of REST, GraphQL, WebSocket, and SOAP APIs covering discovery, authentication, authorization, rate-limiting, and CI/CD integration.

12.8k · bundle

implementing-secrets-scanning-in-ci-cd

Integrate gitleaks and trufflehog into CI/CD pipelines to detect leaked secrets before deployment.

24.6k · bundle

implementing-api-security-testing-with-42crunch

Perform static audit and dynamic conformance scanning of OpenAPI specifications using the 42Crunch platform to identify OWASP API Security Top 10 vulnerabilities.

24.6k · bundle

scanning-containers-with-trivy-in-cicd

Integrate Trivy vulnerability scanning into CI/CD pipelines to detect container image CVEs, Dockerfile misconfigurations, and enforce severity-based quality gates.

24.6k · bundle

Configure, optimize, and troubleshoot CDN deployments with caching strategies, security hardening, and multi-provider management.

Content Security Policy configuration, nonces, and reporting.

Applies the PCI-DSS framework to identify, assess, and mitigate security risks in systems, processes, and data handling.

scanning-iac-and-images-with-trivy

Scan container images, IaC, and SBOMs for vulnerabilities and misconfigurations in CI/CD with Trivy.

24.6k · bundle

security-scanning

CI security scanning: secrets, deps, SAST, triage, expiring exceptions

Content Security Policy configuration, nonces, and reporting.

securing-github-actions-workflows

Hardens GitHub Actions workflows against supply chain attacks, credential theft, and privilege escalation by pinning actions to SHA digests, minimizing GITHUB_TOKEN permissions, preventing script injection, and implementing workflow change controls.

24.6k · bundle

Chief Security Officer mode. (gstack)

lucaspmarie-a11y

Manage environment variables securely by validating schemas, masking sensitive values, and preventing secret exposure in logs or agent context.

container-security

Implements container security with image scanning, runtime protection, image signing, and security policies using tools like Falco, Trivy, and Notary.

Audits codebases for leaked secrets and hardcoded credentials, generates .env templates, configures secrets management with AWS Secrets Manager, Vault, Doppler, or GCP Secret Manager, sets up credential rotation, and integrates secrets into CI/CD pipelines via OIDC federation.

Coordinates five specialized coding agents (linter, perf, refactor, security, test) to enforce quality gates across the development lifecycle, from lint enforcement through performance profiling, refactoring, security auditing, and test coverage.

opensource-pipeline

Fork, sanitize, and package private projects for safe public release through a three-stage pipeline.

static-analysis

Configures and runs static analysis and linting tools across multiple languages, integrating with CI/CD and security platforms.

securing-container-registry-images

Scan container images for vulnerabilities with Trivy and Grype, generate SBOMs, sign images with Cosign and Sigstore, configure registry access controls, and enforce security gates in CI/CD pipelines.

24.6k · bundle

Discovers, classifies, protects, and governs API keys, tokens, secrets, and credentials across all providers with enterprise-grade security auditing and governance.