ci-security-gates
Installation
SKILL.md
CI/CD Security Gates
Add automated security scanning to your CI/CD pipeline. Blocks deployment if code vulnerabilities, leaked secrets, or dangerous dependencies are detected.
Why This Matters
Finding #6 from Malaysian court cases: "No evidence the system went through testing or vulnerability scanning before go-live."
Under PDPA 2024, shipping untested code with known vulnerabilities is criminal negligence.
The Three Gates
| Gate | What it catches | Tool |
|---|---|---|
| SAST | SQL injection, XSS, insecure patterns in YOUR code | CodeQL / Semgrep |
| Secret Scanning | API keys, passwords, tokens accidentally committed | Gitleaks |
| Dependency Audit | Known CVEs in third-party packages | npm audit / pip audit |