npx claudepluginhub killvxk/cybersecurity-skills-zhThis skill uses the workspace's default tool permissions.
在 CI/CD 流水线中自动化 SAST、SCA、容器镜像和密钥扫描，基于严重性阈值设置失败/通过门禁。
Implements DevSecOps pipelines in GitLab CI/CD integrating SAST, DAST, container scanning, dependency scanning, and secret detection. Useful for embedding security in CI workflows.
Designs and implements GitLab CI/CD DevSecOps pipelines integrating SAST, DAST, container scanning, dependency scanning, and secret detection. Useful for embedding security in CI/CD.
Integrates DevSecOps security into CI/CD pipelines: SAST (Semgrep, CodeQL), DAST/SCA, secret scanning, container scans (Trivy, Snyk), and security gates for shift-left controls.
Share bugs, ideas, or general feedback.
在 CI/CD 流水线中自动化 SAST、SCA、容器镜像和密钥扫描，基于严重性阈值设置失败/通过门禁。