'ci/cd' 검색 결과

Manage API keys, passwords, and certificates used in CI/CD, the automated process for testing and deploying software. Connect secret stores, plan credential rotation, restrict access, and prevent sensitive values from appearing in logs.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Moving API keys and passwords out of source code
• Connecting CI/CD pipelines to secret stores
• Planning automated or manual credential rotation

Design CI/CD pipelines that move applications through development, staging, and production. Define approval and security checks, gradual release strategies, health checks, and rollback procedures, and investigate gates or deployments that fail to progress.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Designing CI/CD pipelines across multiple environments
• Introducing canary or blue-green releases
• Investigating stalled approvals and release gates

Scan code, configuration files, and Git history for exposed AWS credentials with TruffleHog. Checks whether detected keys remain active and guides key replacement, incident investigation, and automated checks before commits and during CI/CD.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Auditing Git history for exposed AWS keys
• Adding credential checks before commits and in CI/CD
• Investigating credential exposure after a GuardDuty alert

Assess security weaknesses in CI/CD systems that automate software builds and delivery. Covering GitHub Actions, Jenkins, GitLab CI, and Azure DevOps, the skill examines unsafe inputs, excessive permissions, exposed credentials, and tampered build outputs, alongside detection and defensive controls.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing workflow inputs and execution triggers
• Assessing pipeline permissions and credential exposure
• Checking build artifact handoffs for tampering risks

Explore and configure an Nx monorepo, where multiple projects share one repository. Inspect resolved project settings, identify projects affected by changes, and improve project boundaries, build caching, and CI/CD pipelines.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Exploring applications and shared libraries in an Nx workspace
• Checking which projects a change affects
• Configuring project boundaries and build caching

웹 앱의 운영 환경 배포 절차와 점검 항목을 정리합니다. CI/CD 자동화, Docker 컨테이너화, 상태 확인과 롤백 계획을 다룹니다.

• 테스트와 배포 자동화
• 앱의 Docker 컨테이너화
• 운영 환경 배포 방식 선택

Assess authorized APIs through a ten-stage workflow covering endpoint discovery, authentication, access permissions, input handling, and request limits. Collect reproducible evidence and turn findings into regression checks that can run in a development pipeline.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Review API authentication and access permissions
• Assess GraphQL and WebSocket security
• Check request limits and unintended data exposure

Write more reliable Bash scripts for production automation, CI/CD pipelines, and system administration. Covers input validation, error handling, structured logs, safe temporary files, dry runs to preview changes, and scripts designed for safe reruns.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Writing production automation scripts
• Improving error handling in CI/CD scripts
• Adding dry runs to deployment scripts

Create, review, migrate, or troubleshoot Azure Developer CLI projects. Align application settings, infrastructure definitions, deployment environments, secrets, and automated delivery workflows while checking that configuration files and deployment requirements agree.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Creating an Azure Developer CLI project structure
• Reviewing azure.yaml against Bicep or Terraform definitions
• Organizing environment settings and secret handling

Build a central vulnerability dashboard with DefectDojo to combine scanner findings, remove duplicates, and track remediation. Includes Docker deployment, automated scan imports from CI/CD pipelines, Jira ticket integration, and API queries for reporting metrics.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Combining findings from multiple security scanners
• Importing scan results automatically from CI/CD pipelines
• Connecting vulnerability findings to Jira tickets

Build and review Bash scripts for automation and CI/CD, the pipelines that test and deliver software. Add input validation, error handling, safe file operations, tests, and platform checks to make script behavior easier to verify.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing error handling and input validation in Bash scripts
• Adding automated shell script tests to CI/CD
• Checking Linux and macOS portability

Checks application code, dependencies, and security controls to identify vulnerabilities and plan fixes. Includes Python scanners, reports, incident response workflows, and guidance for adding security checks to CI/CD, the automated build and deployment process.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking code for exposed secrets and injection risks
• Prioritizing fixes for known dependency vulnerabilities
• Adding security checks to CI/CD pipelines

Investigate how credentials can be exposed in CI/CD, the systems that build and deploy software. Covers environment variables, logs, credential stores, cloud trust settings, and runner tokens, with methods to assess access scope and defensive controls.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Review secret exposure in build environments
• Search build logs and caches for leaked credentials
• Assess trust settings between pipelines and cloud services

Submit groups of AI requests as batch jobs with the OmniRoute command line. Manage input files, monitor or cancel jobs, save results and errors, and incorporate batch processing into automated build and deployment workflows.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Submitting AI requests from a JSONL file
• Monitoring batch jobs and waiting for completion
• Saving batch results and error details

Organize GitHub work through task-specific modes for pull request reviews, issue tracking, releases, and branch management. Coordinate repository synchronization and CI/CD, the workflows that test and deploy changes, with support for multiple agents.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Coordinating pull request reviews and merges
• Organizing issues and tracking progress
• Managing releases and CI/CD workflows

Set up ESLint, a tool that checks JavaScript for errors and coding rule violations. Configure shared rules, connect checks to editors and automated workflows, and review flagged code alongside its behavior in the browser.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Setting up ESLint for a JavaScript project
• Applying consistent coding rules across a team
• Adding code checks to editors and CI/CD

Investigate AI-agent and cloud infrastructure challenges in a CTF sandbox. Trace untrusted content into tool actions, compare deployment configuration with runtime behavior, and follow software artifacts from source through build and release to their actual consumers.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Tracing untrusted content into agent tool actions
• Comparing deployment configuration with live behavior
• Following dependencies and artifacts through CI/CD

Learn how to check Claude Code tool calls against a policy and create digitally signed execution records. This walkthrough covers setup, offline verification, tamper demonstrations, and CI/CD integration before adopting the protect-mcp runtime plugin.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Evaluate signed audit records before adopting runtime hooks
• Demonstrate offline verification and tamper detection
• Verify agent execution records in CI/CD

Audit GitHub Actions workflows and CI/CD configurations for supply chain risks. Use Python and YAML parsing to identify unpinned actions, unsafe event expressions, excessive permissions, dependency confusion, and potential exposure of secrets in build pipelines.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing GitHub Actions workflow security
• Checking action version pinning
• Finding unsafe event expressions in scripts

Set up repeatable security tests for LLM apps with Promptfoo and DeepTeam. Connect them to automated build pipelines, detect renewed vulnerabilities to malicious instructions or data leakage, and compare results across model or prompt changes.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Running automated attack tests on every code change
• Blocking merges when security tests fail
• Comparing security across model or prompt versions

Design automated build, test, and deployment workflows for GitHub Actions, GitLab CI/CD, and Jenkins. Covers job ordering, dependency caching, secret handling, and gradual releases that use health checks before expanding deployment.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Automating builds, tests, and deployments
• Reducing pipeline time with caching and parallel jobs
• Planning gradual releases and rollbacks

Assess weaknesses in the software supply chain, from dependency packages to build pipelines and distributed artifacts. Covers authorized proof-of-concept testing, package confusion, container image risks, signing abuse, and defensive checks for tampering.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Assess dependency confusion risks in package registry settings
• Review tampering risks in CI/CD artifacts and container images
• Plan a non-destructive proof of concept and remediation report

Assess AWS, Azure, and GCP environments by identifying identities, permissions, and paths to broader access or data exposure. Covers cloud storage, secrets, cross-account trust, and CI/CD, the automated systems used to build and deploy software.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Planning an AWS, Azure, or GCP security assessment
• Tracing privilege escalation from current permissions
• Reviewing CI/CD credentials and OIDC trust settings

의료 앱 공개 전에 진료 판단 지원 로직, 환자 정보 유출, 데이터 무결성 등을 검증하는 스킬입니다. 중대한 테스트가 실패하면 배포를 중단하는 구성을 제시합니다.

• 전자 의무 기록 공개 전 검증
• 약물 상호작용과 투여량 검증 변경 확인
• 권한 변경 후 환자 정보 유출 확인