“ci/cd”的搜索结果

Design CI/CD pipelines that move applications through development, staging, and production. Define approval and security checks, gradual release strategies, health checks, and rollback procedures, and investigate gates or deployments that fail to progress.

中文简介正在准备中。当前显示英语简介。

• Designing CI/CD pipelines across multiple environments
• Introducing canary or blue-green releases
• Investigating stalled approvals and release gates

Manage API keys, passwords, and certificates used in CI/CD, the automated process for testing and deploying software. Connect secret stores, plan credential rotation, restrict access, and prevent sensitive values from appearing in logs.

中文简介正在准备中。当前显示英语简介。

• Moving API keys and passwords out of source code
• Connecting CI/CD pipelines to secret stores
• Planning automated or manual credential rotation

Scan code, configuration files, and Git history for exposed AWS credentials with TruffleHog. Checks whether detected keys remain active and guides key replacement, incident investigation, and automated checks before commits and during CI/CD.

中文简介正在准备中。当前显示英语简介。

• Auditing Git history for exposed AWS keys
• Adding credential checks before commits and in CI/CD
• Investigating credential exposure after a GuardDuty alert

Assess security weaknesses in CI/CD systems that automate software builds and delivery. Covering GitHub Actions, Jenkins, GitLab CI, and Azure DevOps, the skill examines unsafe inputs, excessive permissions, exposed credentials, and tampered build outputs, alongside detection and defensive controls.

中文简介正在准备中。当前显示英语简介。

• Reviewing workflow inputs and execution triggers
• Assessing pipeline permissions and credential exposure
• Checking build artifact handoffs for tampering risks

Explore and configure an Nx monorepo, where multiple projects share one repository. Inspect resolved project settings, identify projects affected by changes, and improve project boundaries, build caching, and CI/CD pipelines.

中文简介正在准备中。当前显示英语简介。

• Exploring applications and shared libraries in an Nx workspace
• Checking which projects a change affects
• Configuring project boundaries and build caching

为Web应用上线整理部署流程与检查项，涵盖CI/CD测试和部署自动化、Docker容器化、健康检查及回滚计划，帮助选择发布方式并检查上线准备情况。

• 自动化测试与部署
• 将应用打包为Docker容器
• 选择生产环境发布方式

Assess authorized APIs through a ten-stage workflow covering endpoint discovery, authentication, access permissions, input handling, and request limits. Collect reproducible evidence and turn findings into regression checks that can run in a development pipeline.

中文简介正在准备中。当前显示英语简介。

• Review API authentication and access permissions
• Assess GraphQL and WebSocket security
• Check request limits and unintended data exposure

Write more reliable Bash scripts for production automation, CI/CD pipelines, and system administration. Covers input validation, error handling, structured logs, safe temporary files, dry runs to preview changes, and scripts designed for safe reruns.

中文简介正在准备中。当前显示英语简介。

• Writing production automation scripts
• Improving error handling in CI/CD scripts
• Adding dry runs to deployment scripts

Create, review, migrate, or troubleshoot Azure Developer CLI projects. Align application settings, infrastructure definitions, deployment environments, secrets, and automated delivery workflows while checking that configuration files and deployment requirements agree.

中文简介正在准备中。当前显示英语简介。

• Creating an Azure Developer CLI project structure
• Reviewing azure.yaml against Bicep or Terraform definitions
• Organizing environment settings and secret handling

Build a central vulnerability dashboard with DefectDojo to combine scanner findings, remove duplicates, and track remediation. Includes Docker deployment, automated scan imports from CI/CD pipelines, Jira ticket integration, and API queries for reporting metrics.

中文简介正在准备中。当前显示英语简介。

• Combining findings from multiple security scanners
• Importing scan results automatically from CI/CD pipelines
• Connecting vulnerability findings to Jira tickets

Build and review Bash scripts for automation and CI/CD, the pipelines that test and deliver software. Add input validation, error handling, safe file operations, tests, and platform checks to make script behavior easier to verify.

中文简介正在准备中。当前显示英语简介。

• Reviewing error handling and input validation in Bash scripts
• Adding automated shell script tests to CI/CD
• Checking Linux and macOS portability

Checks application code, dependencies, and security controls to identify vulnerabilities and plan fixes. Includes Python scanners, reports, incident response workflows, and guidance for adding security checks to CI/CD, the automated build and deployment process.

中文简介正在准备中。当前显示英语简介。

• Checking code for exposed secrets and injection risks
• Prioritizing fixes for known dependency vulnerabilities
• Adding security checks to CI/CD pipelines

Investigate how credentials can be exposed in CI/CD, the systems that build and deploy software. Covers environment variables, logs, credential stores, cloud trust settings, and runner tokens, with methods to assess access scope and defensive controls.

中文简介正在准备中。当前显示英语简介。

• Review secret exposure in build environments
• Search build logs and caches for leaked credentials
• Assess trust settings between pipelines and cloud services

Submit groups of AI requests as batch jobs with the OmniRoute command line. Manage input files, monitor or cancel jobs, save results and errors, and incorporate batch processing into automated build and deployment workflows.

中文简介正在准备中。当前显示英语简介。

• Submitting AI requests from a JSONL file
• Monitoring batch jobs and waiting for completion
• Saving batch results and error details

Organize GitHub work through task-specific modes for pull request reviews, issue tracking, releases, and branch management. Coordinate repository synchronization and CI/CD, the workflows that test and deploy changes, with support for multiple agents.

中文简介正在准备中。当前显示英语简介。

• Coordinating pull request reviews and merges
• Organizing issues and tracking progress
• Managing releases and CI/CD workflows

Set up ESLint, a tool that checks JavaScript for errors and coding rule violations. Configure shared rules, connect checks to editors and automated workflows, and review flagged code alongside its behavior in the browser.

中文简介正在准备中。当前显示英语简介。

• Setting up ESLint for a JavaScript project
• Applying consistent coding rules across a team
• Adding code checks to editors and CI/CD

Investigate AI-agent and cloud infrastructure challenges in a CTF sandbox. Trace untrusted content into tool actions, compare deployment configuration with runtime behavior, and follow software artifacts from source through build and release to their actual consumers.

中文简介正在准备中。当前显示英语简介。

• Tracing untrusted content into agent tool actions
• Comparing deployment configuration with live behavior
• Following dependencies and artifacts through CI/CD

Learn how to check Claude Code tool calls against a policy and create digitally signed execution records. This walkthrough covers setup, offline verification, tamper demonstrations, and CI/CD integration before adopting the protect-mcp runtime plugin.

中文简介正在准备中。当前显示英语简介。

• Evaluate signed audit records before adopting runtime hooks
• Demonstrate offline verification and tamper detection
• Verify agent execution records in CI/CD

Audit GitHub Actions workflows and CI/CD configurations for supply chain risks. Use Python and YAML parsing to identify unpinned actions, unsafe event expressions, excessive permissions, dependency confusion, and potential exposure of secrets in build pipelines.

中文简介正在准备中。当前显示英语简介。

• Reviewing GitHub Actions workflow security
• Checking action version pinning
• Finding unsafe event expressions in scripts

Set up repeatable security tests for LLM apps with Promptfoo and DeepTeam. Connect them to automated build pipelines, detect renewed vulnerabilities to malicious instructions or data leakage, and compare results across model or prompt changes.

中文简介正在准备中。当前显示英语简介。

• Running automated attack tests on every code change
• Blocking merges when security tests fail
• Comparing security across model or prompt versions

Design automated build, test, and deployment workflows for GitHub Actions, GitLab CI/CD, and Jenkins. Covers job ordering, dependency caching, secret handling, and gradual releases that use health checks before expanding deployment.

中文简介正在准备中。当前显示英语简介。

• Automating builds, tests, and deployments
• Reducing pipeline time with caching and parallel jobs
• Planning gradual releases and rollbacks

Assess AWS, Azure, and GCP environments by identifying identities, permissions, and paths to broader access or data exposure. Covers cloud storage, secrets, cross-account trust, and CI/CD, the automated systems used to build and deploy software.

中文简介正在准备中。当前显示英语简介。

• Planning an AWS, Azure, or GCP security assessment
• Tracing privilege escalation from current permissions
• Reviewing CI/CD credentials and OIDC trust settings

Assess weaknesses in the software supply chain, from dependency packages to build pipelines and distributed artifacts. Covers authorized proof-of-concept testing, package confusion, container image risks, signing abuse, and defensive checks for tampering.

中文简介正在准备中。当前显示英语简介。

• Assess dependency confusion risks in package registry settings
• Review tampering risks in CI/CD artifacts and container images
• Plan a non-destructive proof of concept and remediation report

为医疗应用发布前设置患者安全检查，验证临床决策支持、患者信息泄露、数据完整性、诊疗流程及外部集成，并在关键测试失败时阻止部署。

• 电子病历发布前验证
• 验证药物相互作用和剂量规则变更
• 权限变更后检查患者信息泄露