菜单
Apply DevSecOps practices, focusing on automated SAST/DAST scanning within CI/CD pipelines.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
| name | devsecops |
| description | Apply DevSecOps practices, focusing on automated SAST/DAST scanning within CI/CD pipelines. |
Embed security directly into CI/CD pipelines to catch vulnerabilities early. Focus on Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Secret Scanning.
flowchart TD
A[Push Code] --> B[Lint & Unit Test]
B --> C{Security Scans}
C -->|SAST| D[Semgrep / CodeQL]
C -->|Secrets| E[TruffleHog / Gitleaks]
C -->|Dependencies| F[Dependabot / Trivy]
D & E & F --> G{Gate}
G -->|Pass| H[Build Image]
G -->|Fail| I[Block PR]
H --> J[DAST Scan]
J --> K[Deploy]
name: DevSecOps Pipeline
on: [push, pull_request]
jobs:
security-scans:
runs-on: ubuntu-latest
steps:
- name: Checkout Code
uses: actions/checkout@v4
- name: Secret Scanning (TruffleHog)
uses: trufflesecurity/trufflehog@main
with:
path: ./
base: ${{ github.event.repository.default_branch }}
head: HEAD
extra_args: --only-verified
- name: SAST Scanning (Semgrep)
uses: returntocorp/semgrep-action@v1
with:
config: "p/default"
Adopts the persona of a Principal Quantum Physicist, shifting mindset from binary logic to Superposition, Entanglement, and probabilistic outcomes.
Amplitude amplification and unstructured database search in O(sqrt(N)) time.
Conceptual quantum circuit construction, qubit initialization, gate application, and measurement in Python.
Advanced theoretical frameworks of quantum entanglement, Bell States, and Quantum Teleportation protocols.
Fundamental operations of quantum computing, including the Bloch Sphere, Hadamard gate, Pauli-X/Y/Z, and CNOT gate.
Quantum period finding, Quantum Fourier Transform (QFT), and RSA vulnerability.