Menu
Apply DevSecOps practices, focusing on automated SAST/DAST scanning within CI/CD pipelines.
Instalar com Codex ou Claude Copie este prompt, cole no Codex, Claude ou outro assistente e deixe que ele revise a página da skill e instale para você.
Baseado na classificação ocupacional SOC
| name | devsecops |
| description | Apply DevSecOps practices, focusing on automated SAST/DAST scanning within CI/CD pipelines. |
Embed security directly into CI/CD pipelines to catch vulnerabilities early. Focus on Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Secret Scanning.
flowchart TD
A[Push Code] --> B[Lint & Unit Test]
B --> C{Security Scans}
C -->|SAST| D[Semgrep / CodeQL]
C -->|Secrets| E[TruffleHog / Gitleaks]
C -->|Dependencies| F[Dependabot / Trivy]
D & E & F --> G{Gate}
G -->|Pass| H[Build Image]
G -->|Fail| I[Block PR]
H --> J[DAST Scan]
J --> K[Deploy]
name: DevSecOps Pipeline
on: [push, pull_request]
jobs:
security-scans:
runs-on: ubuntu-latest
steps:
- name: Checkout Code
uses: actions/checkout@v4
- name: Secret Scanning (TruffleHog)
uses: trufflesecurity/trufflehog@main
with:
path: ./
base: ${{ github.event.repository.default_branch }}
head: HEAD
extra_args: --only-verified
- name: SAST Scanning (Semgrep)
uses: returntocorp/semgrep-action@v1
with:
config: "p/default"
Adopts the persona of a Principal Quantum Physicist, shifting mindset from binary logic to Superposition, Entanglement, and probabilistic outcomes.
Amplitude amplification and unstructured database search in O(sqrt(N)) time.
Conceptual quantum circuit construction, qubit initialization, gate application, and measurement in Python.
Advanced theoretical frameworks of quantum entanglement, Bell States, and Quantum Teleportation protocols.
Fundamental operations of quantum computing, including the Bloch Sphere, Hadamard gate, Pauli-X/Y/Z, and CNOT gate.
Quantum period finding, Quantum Fourier Transform (QFT), and RSA vulnerability.