Security Pipeline

advanced

Comprehensive security scanning combining static analysis, secrets detection, and threat modeling.

Architecture

Static Analysis Skill

Scans codebase for vulnerability patterns using SAST rules

90/100

ls /workspace

Secrets Detection Skill

Detects exposed API keys, credentials, and sensitive data

85/100

ls /workspace

Threat Modeling Skill

Analyzes system architecture for STRIDE threat categories

80/100

ls /workspace

Expected Output

Security Pipeline Report Static Analysis: 3 critical, 5 warnings Secrets: 2 exposed credentials found Threats: 4 STRIDE findings (1 critical) -> Action items generated

Related Recipes

Incident Response Command Center

ADVANCED

Triage production incidents from alerts to fixes with observability, chat, and repo context.

devopsworkflow

5 components

Observability Stack

INTERMEDIATE

Full-stack monitoring with Grafana dashboards, Datadog APM, and Sentry error tracking.

devopsinfra

3 components

Infrastructure as Code

ADVANCED

Cloud infrastructure provisioning with Terraform, AWS, and Docker containerization.

devopsinfra

3 components