Results for “ci-workflows”
9 skills
mukul975 detecting-supply-chain-attacks-in-ci-cd
Scans GitHub Actions workflows and CI/CD pipeline configurations for supply chain attack vectors including unpinned actions, script injection via expressions, dependency confusion, and secrets exposure.
24.6k · bundle
mukul975 implementing-secret-scanning-with-gitleaks
Detect and prevent hardcoded secrets in git repositories using Gitleaks, including pre-commit hooks, CI/CD integration, custom rules, baseline management, and remediation workflows.
24.6k · bundle
trailofbits agentic-actions-auditor
Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations, detecting attack vectors where attacker-controlled input reaches AI agents in CI/CD pipelines.
6k · bundle
More results
getsentry gha-security-review
Audits GitHub Actions workflows for exploitable vulnerabilities with concrete attack scenarios.
845 · bundle
winbda soc-design
Design Security Operations Centers with processes. TRIGGERS - Use when user needs help with soc-design related tasks.
3
lionelsimai soc-design
Design Security Operations Centers with processes. TRIGGERS - Use when user needs help with soc-design related tasks.
22
mukul975 securing-github-actions-workflows
Hardens GitHub Actions workflows against supply chain attacks, credential theft, and privilege escalation by pinning actions to SHA digests, minimizing GITHUB_TOKEN permissions, preventing script injection, and implementing workflow change controls.
24.6k · bundle
aibot88 deps
Use when hardening npm supply chain, pinning dependency versions, adding .npmrc security flags, or setting up Renovate and audit workflows. Locks down install-time scripts, registries, version ranges, and CI checks.
3 · bundle
mukul975 building-vulnerability-scanning-workflow
Establishes recurring vulnerability scanning workflows using Nessus, Qualys, or OpenVAS, prioritizes findings with risk scoring and CISA KEV data, integrates with SIEM for exploitation detection, and tracks remediation via SLA-based dashboards and automated ticketing.
24.6k · bundle