메뉴
Design and optimize DevSecOps CI/CD pipelines with security gates, SAST, DAST, and container scanning
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Run chaos security engineering tests — AI agent attempts to hack the Sprint output and reports findings to the team
Validate Java and TypeScript code against banking naming conventions, style rules, quality standards, and secure coding practices
Perform OWASP Top 10 security assessments, vulnerability scanning, and PCI-DSS compliance checks
Design test strategies including security testing, write test plans, and identify test scenarios for banking features with DevSecOps integration
Perform STRIDE threat modeling during Sprint Planning for new features and APIs
Run UX review checklist for banking user flows, validate WCAG accessibility compliance, assess security UX patterns, and review customer interface design
| name | pipeline-design |
| description | Design and optimize DevSecOps CI/CD pipelines with security gates, SAST, DAST, and container scanning |
Invoke when designing, reviewing, or optimizing the CI/CD DevSecOps pipeline.
Developer Commit
→ Pre-commit hooks (git-secrets)
→ Build (Gradle/Vite)
→ SAST (SonarQube + Snyk Code)
→ Unit Tests (JUnit 5 / Vitest)
→ Integration Tests (Testcontainers)
→ Dependency Scan (Snyk Open Source)
→ Container Build + Scan (Snyk Container)
→ Deploy to Staging
→ DAST (OWASP ZAP against staging)
→ Smoke Tests
→ Manual Approval (prod only)
→ Deploy to Production (Blue/Green)
→ Post-deploy monitoring
jobs:
build-and-scan:
steps: [checkout, build, sast, unit-test]
integration-test:
needs: build-and-scan
steps: [integration-test, dependency-scan]
deploy-staging:
needs: integration-test
steps: [container-build, container-scan, deploy-staging, dast]
deploy-prod:
needs: deploy-staging
if: github.ref == 'refs/heads/main'
steps: [manual-approval, blue-green-deploy, smoke-test]