Security and Compliance

What problem does it solve?

This skill provides structured guidance and tooling for configuring and auditing security controls, managing secrets, and enforcing secure coding and deployment practices, reducing risk across software and infrastructure.

Core Features & Use Cases

• Security Scanning: SAST/DAST workflows (CodeQL, Semgrep, Bandit) and container security checks integrated into CI.
• Dependency & Secrets Management: Dependency scanning, secret scanning, and secure storage practices.
• Infrastructure & Application Security: IaC checks (Checkov, tfsec), Kubernetes hardening, and secure configurations.
• Use Case: A development team runs a security sweep on a pull request to surface critical vulnerabilities and policy violations before merge.

Quick Start

Trigger a security scan on your project using your CI workflow to run CodeQL/Semgrep and dependency checks.