66건 · 관련도순
Automate security workflows and remediation. Build security pipelines, automate compliance checks, and implement SOAR capabilities. Use when scaling security operations or implementing DevSecOps.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Identifies security vulnerabilities, generates structured audit reports with severity ratings, and provides actionable remediation guidance for SAST, DevSecOps, and compliance.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Implementing multi-layer security scanning (container, SAST, DAST, SCA, secrets), SBOM generation, and risk-based vulnerability prioritization in CI/CD pipelines. Use when building DevSecOps workflows, ensuring compliance, or establishing security gates for container deployments.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Autonomous AI code generation safety guardrail register: static AST analysis, forbidden import filters, and zero-day vulnerability checks.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Autonomous DevSecOps & FinOps Guardrails. Orchestrates Gemini 3 Flash to audit Linux Kernel patches, Terraform cost drifts, and K8s compliance.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Embed security into DevOps — pipeline security gates, guardrails, and culture that ships fast and safe.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Autonomous DevSecOps & FinOps Guardrails. Orchestrates Gemini 3 Flash to audit Linux Kernel patches, Terraform cost drifts, and K8s compliance.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Use for security review, audit, hardening, compliance, DevSecOps, network, infrastructure, or application security with focused references.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Scans GitHub Actions workflows and CI/CD pipeline configurations for supply chain attack vectors including unpinned actions, script injection via expressions, dependency confusion, and secrets exposure. Uses PyGithub and YAML parsing for automated audit. Use when hardening CI/CD pipelines or investigating compromised build systems.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Autonomous DevSecOps & FinOps Guardrails. Orchestrates Gemini 3 Flash to audit Linux Kernel patches, Terraform cost drifts, and K8s compliance.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Detecting exposed AWS credentials in source code repositories, CI/CD pipelines, and configuration files using TruffleHog, git-secrets, and AWS-native detection mechanisms to prevent credential theft and unauthorized account access.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Detect and prevent public-over-private name resolution in npm, PyPI, and Maven.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Deploy DefectDojo as a centralized vulnerability management dashboard with scanner integrations, deduplication, metrics tracking, and Jira ticketing workflows.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Use when performing cybersecurity operations - offensive or defensive - including threat detection and hunting, SOC operations, incident response, digital forensics and DFIR, malware analysis and reverse engineering, threat intelligence, cloud/container/network/application/API security, identity-access and zero-trust, OT/ICS and endpoint security, vulnerability and supply-chain management, DevSecOps, cryptography, AI security, compliance and governance, and red-team or penetration testing under signed rules of engagement; routes to one of 800+ technique playbooks mapped to MITRE ATT&CK, D3FEND, and NIST CSF.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Knowledge base from DOE Systems Engineering Methodology (SEM) Version 3 — the DOE SDLC for IT investments. Use for staged systems lifecycle planning through maintenance, Stage Exits, Structured Walkthroughs, In-Stage Assessments, requirements traceability, and CMM-aligned process discipline. Covers SEM3 (2002) guidance only; does not replace modern DevSecOps tooling standards, DOE O 413.3B capital-asset directives, or current CIO policy supersessions.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Autonomous DevSecOps & FinOps Guardrails. Guide to reviewing Linux kernel patches, Terraform cost changes and Kubernetes policy with a separately reviewed upstream tool and configured model.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Configure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code. Use when setting up security scanning, implementing DevSecOps practices, or automating code vulnerability detection.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Autonomous DevSecOps & FinOps Guardrails.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
bu skill covers implementing Gitleaks for Tespit etme and preventing hardcoded secrets in git repositories. It addresses configuring pre-commit hooks, CI/CD pipeline integration, custom rule authoring for organization-specific secrets, baseline management for existing repositories, and remediation workflows for exposed credentials.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Write custom Semgrep SAST rules in YAML to tespit etmeapplication-specific vulnerabilities, enforce coding standards, and integrate into CI/CD pipelines.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Scan container images, filesystems, and Kubernetes manifests for vulnerabilities, misconfigurations, exposed secrets, and license compliance issues using Aqua Security Trivy with SBOM generation and CI/CD integration.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Configure GitHub Advanced Security with CodeQL to perform automated static analysis and vulnerability Tespit across repositories at enterprise scale.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
bu skill covers integrating Static Application Security Testing (SAST) tools—CodeQL and Semgrep—into GitHub Actions CI/CD pipelines. It addresses configuring automated code scanning on pull requests and pushes, tuning rules to reduce false positives, uploading SARIF results to GitHub Advanced Security, and establishing quality gates that block merges when high-severity vulnerabilities are Detected.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Perform security risk analysis on Kubernetes resource manifests using Kubesec to identify misconfigurations, privilege escalation risks, and deviations from security best practices.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.