DevSecOps Pipeline Generator

This skill generates ready-to-commit GitHub Actions workflow YAML files for multi-stage security CI/CD pipelines. Unlike scanning skills that report findings or test generators that produce test code, this skill outputs complete .github/workflows/security.yml files with SAST, SCA, secrets detection, container scanning, and DAST stages — auto-configured for the detected project ecosystem. No external tool installation is required; the generated workflow uses GitHub-hosted actions that run in CI.

When to Use

• When the user asks to "generate a security pipeline" or "create a security workflow"
• When the user mentions "DevSecOps", "CI/CD security", or "GitHub Actions security"
• When the user wants to "add security scanning to CI" or "set up automated security checks"
• When the user asks to "create a security.yml" or "generate a GitHub Actions security workflow"
• When a project has no existing security CI/CD pipeline and the user wants one generated
• When the user asks to "shift security left" or "automate security scanning"

When NOT to Use

DO NOT activate if the request is not about setting up a CI/CD security pipeline, even if the word "security" appears. The presence of security keywords alone is not a trigger — the request must be about wiring security into a GitHub Actions workflow or equivalent CI/CD system.