The interface is localized. Skill descriptions and documents are machine-translated by AI into your language; code, commands, paths and technical terms stay in the original, and the author's document governs.
Explore skills
Development · SKILL.md

implementing-devsecops-security-scanning

implementing-devsecops-security-scanning

Integrate security scanning into CI/CD pipelines using tools like Semgrep, Trivy, and Gitleaks. Covers SAST, SCA, container scanning, and secret detection with structured JSON output for pipeline gates.

Independent GitHub snapshot · Automated classification · Original documentation governs

Skill documentation

GitHub

name: implementing-devsecops-security-scanning description: > Integrate security scanning into CI/CD pipelines using tools like Semgrep, Trivy, and Gitleaks. Covers SAST, SCA, container scanning, and secret detection with structured JSON output for pipeline gates. domain: cybersecurity subdomain: application-security tags: [devsecops, sast, sca, container-security, ci-cd] version: "1.0" author: mahipal license: Apache-2.0

Implementing DevSecOps Security Scanning

Automate SAST, SCA, container image, and secret scanning in CI/CD pipelines with fail/pass gates based on severity thresholds.

Saved skills