UI はローカライズ済みです。スキルの紹介と説明文書は選択した言語へ AI が自動翻訳し、コード・コマンド・パス・専門用語は原文のままです。原作者の文書が優先されます。
スキルを探す
開発・技術 · SKILL.md

implementing-devsecops-security-scanning

implementing-devsecops-security-scanning

Integrate security scanning into CI/CD pipelines using tools like Semgrep, Trivy, and Gitleaks. Covers SAST, SCA, container scanning, and secret detection with structured JSON output for pipeline gates.

Independent GitHub snapshot · Automated classification · Original documentation governs

スキルの説明

GitHub

name: implementing-devsecops-security-scanning description: > Integrate security scanning into CI/CD pipelines using tools like Semgrep, Trivy, and Gitleaks. Covers SAST, SCA, container scanning, and secret detection with structured JSON output for pipeline gates. domain: cybersecurity subdomain: application-security tags: [devsecops, sast, sca, container-security, ci-cd] version: "1.0" author: mahipal license: Apache-2.0

Implementing DevSecOps Security Scanning

Automate SAST, SCA, container image, and secret scanning in CI/CD pipelines with fail/pass gates based on severity thresholds.

保存したスキル