skills.rest
adaptive-enforcement-lab
adaptive-enforcement-labOFFICIAL
Explore all skills by this author →
GitHub

sdlc-hardening-implementation-roadmap

Deploy defense-in-depth SDLC hardening across four phased implementation stages.

3|3|Updated Jan 4, 2026
Search Tags:#ci/cd#security#evidence#sdlc#hardening#policy-enforcement
One-click install
npx skills add https://github.com/adaptive-enforcement-lab/claude-skills --skill sdlc-hardening-implementation-roadmap
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sdlc-hardening-implementation-roadmap
Source: https://github.com/adaptive-enforcement-lab/claude-skills/tree/main/plugins/enforce/skills/sdlc-hardening-implementation-roadmap
Command: npx skills add https://github.com/adaptive-enforcement-lab/claude-skills --skill sdlc-hardening-implementation-roadmap

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires gh, jq, git, kubectl, gsutil, docker, and includes scripts (resource) components.

What problem does it solve?

Deploy defense-in-depth SDLC hardening across four phases: pre-commit hooks, CI/CD gates, runtime enforcement, and continuous audit evidence collection systems.

Core Features & Use Cases

  • Phase-aligned controls: local enforcement (pre-commit), branch protection, CI/CD gates, and runtime policy enforcement.
  • Runtime governance and evidence: policy enforcement (Kyverno), SBOM provenance, and automated audit artifacts.
  • Governance automation: scalable roadmap for auditable, organization-wide SDLC hardening.

Quick Start

Begin with Phase 1 to establish local enforcement and then progress through Phase 2, Phase 3, and Phase 4 for end-to-end SDLC hardening.

Frequently Asked Questions about sdlc-hardening-implementation-roadmap

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement SDLC hardening across development and CI/CD pipelines?▼

SDLC hardening is deployed through a phased defense-in-depth roadmap spanning local development, CI/CD pipelines, runtime policy enforcement, and audit governance. You progress sequentially through four phases applying actionable controls like pre-commit hooks.

What is the best way to automate audit evidence collection for SDLC security?▼

Automated audit evidence collection for SDLC security is achieved by deploying continuous governance automation that generates SBOM provenance and audit artifacts. This ensures scalable, auditable organization-wide compliance.

Do I need kubectl and Docker to enforce runtime Kyverno policies?▼

Enforcing runtime Kyverno policies requires kubectl and Docker along with git, gh, jq, and gsutil. These dependencies support deploying and managing runtime policy enforcement within your containerized clusters.

How do I set up pre-commit hooks and branch protection for CI/CD security gates?▼

Pre-commit hooks and branch protection for CI/CD security gates are established in the initial phases of the hardening roadmap. You begin with Phase 1 local enforcement controls and then progress to Phase 2 CI/CD pipeline gates.

Can I use this roadmap to apply defense-in-depth controls organization-wide?▼

Yes, you can use this roadmap to apply defense-in-depth controls organization-wide. It provides governance automation designed to scale phased SDLC hardening, ensuring auditable security controls across all teams.

Related Skills

Explore More Software Engineering Skills→
gaupoitgaupoit
4

wordpress-development

Automates Docker-based WordPress setup, hardening, and verification workflows using WP-CLI and PHP 8.0+.

Community
Advanced
adaptive-enforcement-labadaptive-enforcement-lab
3

phase-4-advanced-month-4

Automate audit evidence collection and compliance validation for software projects.

Official
Advanced
adaptive-enforcement-labadaptive-enforcement-lab
3

policy-as-code-end-to-end-enforcement

Enforce security policies across local development, CI pipelines, and Kubernetes runtime.

Official
Advanced
meridianhubmeridianhub
10

skill-security-practices

Automate security scanning with gosec, Trivy, and SBOM generation in CI/CD pipelines.

Official
Advanced