# Implementing Devsecops Security Scanning

> Integrate security scanning into CI/CD pipelines using tools like Semgrep, Trivy, and Gitleaks. Covers SAST, SCA, container scanning, and secret detection with structured JSON output for pipeline gates.

- Skill: `autohandai-community-skills/implementing-devsecops-security-scanning` (Agent Skill, multi-file: 4 files)
- Install (CLI): `npx skillmds@latest add autohandai-community-skills/implementing-devsecops-security-scanning`
- Raw SKILL.md: https://api.skillmd.com/api/skills/autohandai-community-skills/implementing-devsecops-security-scanning/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: DevOps & Infra
- License: Apache-2.0
- Author: autohandai (https://skillmd.com/u/autohandai-community-skills)
- Updated: 2026-09-21
- Page: https://skillmd.com/skills/autohandai-community-skills/implementing-devsecops-security-scanning

---


# Implementing DevSecOps Security Scanning

Automate SAST, SCA, container image, and secret scanning in CI/CD
pipelines with fail/pass gates based on severity thresholds.