Menu
Apply DevSecOps practices, focusing on automated SAST/DAST scanning within CI/CD pipelines.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Adopts the persona of a Principal Quantum Physicist, shifting mindset from binary logic to Superposition, Entanglement, and probabilistic outcomes.
Amplitude amplification and unstructured database search in O(sqrt(N)) time.
Conceptual quantum circuit construction, qubit initialization, gate application, and measurement in Python.
Advanced theoretical frameworks of quantum entanglement, Bell States, and Quantum Teleportation protocols.
Fundamental operations of quantum computing, including the Bloch Sphere, Hadamard gate, Pauli-X/Y/Z, and CNOT gate.
Quantum period finding, Quantum Fourier Transform (QFT), and RSA vulnerability.
| name | devsecops |
| description | Apply DevSecOps practices, focusing on automated SAST/DAST scanning within CI/CD pipelines. |
Embed security directly into CI/CD pipelines to catch vulnerabilities early. Focus on Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Secret Scanning.
flowchart TD
A[Push Code] --> B[Lint & Unit Test]
B --> C{Security Scans}
C -->|SAST| D[Semgrep / CodeQL]
C -->|Secrets| E[TruffleHog / Gitleaks]
C -->|Dependencies| F[Dependabot / Trivy]
D & E & F --> G{Gate}
G -->|Pass| H[Build Image]
G -->|Fail| I[Block PR]
H --> J[DAST Scan]
J --> K[Deploy]
name: DevSecOps Pipeline
on: [push, pull_request]
jobs:
security-scans:
runs-on: ubuntu-latest
steps:
- name: Checkout Code
uses: actions/checkout@v4
- name: Secret Scanning (TruffleHog)
uses: trufflesecurity/trufflehog@main
with:
path: ./
base: ${{ github.event.repository.default_branch }}
head: HEAD
extra_args: --only-verified
- name: SAST Scanning (Semgrep)
uses: returntocorp/semgrep-action@v1
with:
config: "p/default"