ci-security-pipeline
Installation
SKILL.md
CI Security Pipeline
Generate CI/CD pipeline configurations with built-in security scanning stages. Supports GitHub Actions, GitLab CI, and generic pipeline patterns.
When to Use
- Creating new CI/CD pipelines for Docker-based projects
- Adding security scanning to existing pipelines
- Setting up deployment gates that block insecure images
- Generating SBOM and image signing workflows
- When the user mentions "CI security", "pipeline scanning", "deploy gate", or any CI system name
Required Pipeline Stages
Every container CI pipeline MUST include these stages in order:
Stage 1: Dockerfile Lint
Catch misconfigurations before building. Use Hadolint.